dbxtool1
Mechanism to distribute and apply uefi secure boot dbx updates
Usage
dbxtool [{--dbx=dbxfile | -d
dbxfile}]
[{--list | -l}]
[{--verbose | -v}]
[{--apply | -a}]
[{updatedir | update0
[updateN]}]
Overview
dbxtool is a command line tool and oneshot systemd service for applying UEFI Secure Boot DBX updates.
Options
-
--dbx=dbxfile -
Use a specified file for dbx rather than the system variable. This option only works with
--list.
-
--list -
List DBX entries in the system database, or in a copy of it or an update file.
-
--verbose -
Show a bunch of verbose output about what dbxtool is doing.
-
--apply -
Apply updates specified on the command line. Does not work with
--dbx. This argument requires either an updatedir argument or one or more updateN arguments.
- updatedir
-
Directory of dbx updates. Filenames must end in ".bin". This argument only works with
--apply.
- update0
-
An individual dbx update. This argument only works with
--apply.
Releases
4 releases since Debian 11 (Bullseye); the text changed 2 times.
--apply since Arch Linux 2026-11-01;
--dbx since Arch Linux 2026-11-01;
--list since Arch Linux 2026-11-01;
--verbose since Arch Linux 2026-11-01.
--force until Debian 11 (Bullseye);
--help until Debian 11 (Bullseye);
--version until Debian 11 (Bullseye);
-a until Debian 11 (Bullseye);
-d until Debian 11 (Bullseye);
-f until Debian 11 (Bullseye);
-h until Debian 11 (Bullseye);
-l until Debian 11 (Bullseye);
-v until Debian 11 (Bullseye).