sbkeysync (1) - Linux Manuals
sbkeysync: UEFI secure boot key synchronization tool
NAME
sbkeysync - UEFI secure boot key synchronization tool
SYNOPSIS
sbkeysync [,options/]DESCRIPTION
Update EFI key databases from the filesystemOPTIONS
- --efivars-path <dir>
- Path to efivars mountpoint (or regular directory for testing)
- --verbose
- Print verbose progress information
- --dry-run
- Don't update firmware key databases
- --pk
- Set PK
- --keystore <dir>
- Read keys from <dir>/{db,dbx,KEK}/* (can be specified multiple times, first dir takes precedence)
- --no-default-keystores
- Don't read keys from the default
-
keystore dirs