Reference

dbxtool(1)

mechanism to distribute and apply UEFI Secure Boot DBX updates

NAME

dbxtool - mechanism to distribute and apply UEFI Secure Boot DBX updates

SYNOPSIS

dbxtool [--dbx=dbxfile | -d dbxfile ] [ --list | -l ]
[ --verbose | -v ] [ --apply | -a ]
[ updatedir | update0 [ ... updateN ]]

DESCRIPTION

dbxtool is a command line tool and oneshot systemd service for applying UEFI Secure Boot DBX updates.

OPTIONS

--dbx=dbxfile

Use a specified file for dbx rather than the system variable. This option only works with --list.

--list

List DBX entries in the system database, or in a copy of it or an update file.

--verbose

Show a bunch of verbose output about what dbxtool is doing.

--apply

Apply updates specified on the command line. Does not work with --dbx. This argument requires either an updatedir argument or one or more updateN arguments.

updatedir

Directory of dbx updates. Filenames must end in ".bin". This argument only works with --apply.

update0

An individual dbx update. This argument only works with --apply.

AUTHORS

Peter Jones

History

--apply since Arch Linux 2026-11-01; --dbx since Arch Linux 2026-11-01; --list since Arch Linux 2026-11-01; --verbose since Arch Linux 2026-11-01.

--force until Debian 11 (Bullseye); --help until Debian 11 (Bullseye); --version until Debian 11 (Bullseye); -a until Debian 11 (Bullseye); -d until Debian 11 (Bullseye); -f until Debian 11 (Bullseye); -h until Debian 11 (Bullseye); -l until Debian 11 (Bullseye); -v until Debian 11 (Bullseye).