sbkeysync - UEFI secure boot key synchronization tool
sbkeysync [options]
Update EFI key databases from the filesystem
−−efivars−path <dir>
Path to efivars mountpoint (or regular directory for testing)
−−verbose
Print verbose progress information
−−dry−run
Don’t update firmware key databases
|
−−pk |
Set PK |
−−keystore <dir>
Read keys from <dir>/{db,dbx,KEK}/* (can be specified multiple times, first dir takes precedence)
−−no−default−keystores
Don’t read keys from the default
keystore dirs