SBKEYSYNC

NAME

sbkeysync - UEFI secure boot key synchronization tool

SYNOPSIS

sbkeysync [options]

DESCRIPTION

Update EFI key databases from the filesystem

OPTIONS

--efivars-path <dir>

Path to efivars mountpoint (or regular directory for testing)

--verbose

Print verbose progress information

--dry-run

Don’t update firmware key databases

--pk

Set PK

--keystore <dir>

Read keys from <dir>/{db,dbx,KEK}/* (can be specified multiple times, first dir takes precedence)

--no-default-keystores

Don’t read keys from the default

keystore dirs