sbkeysync1
Uefi secure boot key synchronization tool
Usage
sbkeysync [options]
Overview
Update EFI key databases from the filesystem
Options
-
--efivars-path <dir> -
Path to efivars mountpoint (or regular directory for testing)
-
--verbose -
Print verbose progress information
-
--dry-run -
Don't update firmware key databases
-
--pk -
Set PK
-
--keystore <dir> -
Read keys from <dir>/{db,dbx,KEK}/* (can be specified multiple times, first dir takes precedence)
-
--no-default-keystores -
Don't read keys from the default
-
keystore dirs
Releases
3 releases since Debian 12 (Bookworm); the text changed 2 times.