Hi SD,
From Microsoft website we can see:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-and-password-changes
When you try to sign in using your PIN or biometric, you will see the following message:
Your password was changed on a different device. You must sign in to this device once with your new password, and then you can sign in with your PIN.
Click OK.
Click Sign-in options.
Click the Password button.
Sign in with new password.
The next time that you sign in, you can select Sign-in options and then select PIN to resume using your PIN.
So I think your method should be ok, the cause of current situation is your Client Login Extension software, they may have some conflict on password change side. Please contact CLE support for help, what we can do now is just what you have done:
When we need to change password, uninstall CLE firstly, after new password and PIN sync successfully, install CLE back.
Regards
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com.