NAME¶

sbkeysync - UEFI secure boot key synchronization tool

SYNOPSIS¶

sbkeysync [options]

DESCRIPTION¶

Update EFI key databases from the filesystem

OPTIONS¶

--efivars-path <dir>

Path to efivars mountpoint (or regular directory for testing)

--verbose

Print verbose progress information

--dry-run

Don't update firmware key databases

--pk

Set PK

--keystore <dir>

Read keys from <dir>/{db,dbx,KEK}/* (can be specified multiple times, first dir takes precedence)

--no-default-keystores

Don't read keys from the default

keystore dirs