---
name: "sbkeysync"
section: "1"
platform: "linux"
package: "sbsigntools"
version: "0.9.5-4"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/sbkeysync"
---

# sbkeysync(1)

UEFI secure boot key synchronization tool

## NAME

sbkeysync - UEFI secure boot key synchronization tool

## SYNOPSIS

**sbkeysync** \[*options*\]

## DESCRIPTION

Update EFI key databases from the filesystem

## OPTIONS

- **--efivars-path** \<dir\>

  Path to efivars mountpoint (or regular directory for testing)

- **--verbose**

  Print verbose progress information

- **--dry-run**

  Don't update firmware key databases

- **--pk**

  Set PK

- **--keystore** \<dir\>

  Read keys from \<dir\>/{db,dbx,KEK}/\* (can be specified multiple times, first dir takes precedence)

- **--no-default-keystores**

  Don't read keys from the default

-

  keystore dirs