---
name: "dbxtool"
section: "1"
platform: "linux"
package: "dbxtool"
version: "8-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/dbxtool"
---

# dbxtool(1)

mechanism to distribute and apply UEFI Secure Boot DBX updates

## NAME

dbxtool - mechanism to distribute and apply UEFI Secure Boot DBX updates

## SYNOPSIS

**dbxtool** \[--dbx=*dbxfile* \| -d *dbxfile* \] \[ --list \| -l \]\
 	\[ --verbose \| -v \] \[ --apply \| -a \]\
 	\[ *updatedir* \| *update0* \[ ... *updateN* \]\]

## DESCRIPTION

**dbxtool** is a command line tool and oneshot systemd service for applying UEFI Secure Boot DBX updates.

## OPTIONS

- **--dbx**=*dbxfile*

  Use a specified file for dbx rather than the system variable.  This option only works with **--list**.

- **--list**

  List DBX entries in the system database, or in a copy of it or an update file.

- **--verbose**

  Show a bunch of verbose output about what dbxtool is doing.

- **--apply**

  Apply updates specified on the command line.  Does not work with **--dbx**. This argument requires either an *updatedir* argument or one or more *updateN* arguments.

- *updatedir*

  Directory of dbx updates.  Filenames must end in ".bin".  This argument only works with **--apply**.

- *update0*

  An individual dbx update.  This argument only works with **--apply**.

## AUTHORS

```
Peter Jones
```