Chapter 23. Updating the Secure Boot Revocation List

Procedure

1. Determine the current version of the Revocation List:

   # fwupdmgr get-devices

   See the Current version field under UEFI dbx.

2. Enable the LVFS Revocation List repository:

   # fwupdmgr enable-remote lvfs

3. Refresh the repository metadata:

   # fwupdmgr refresh

4. Apply the Revocation List update:

   • On the command line:

     # fwupdmgr update

   • In the graphical interface:

     1. Open the Software application
     2. Navigate to the Updates tab.
     3. Find the Secure Boot dbx Configuration Update entry.
     4. Click Update.
5. At the end of the update, fwupdmgr or Software asks you to reboot the system. Confirm the reboot.

Procedure

1. Determine the current version of the Revocation List:

   # fwupdmgr get-devices

   See the Current version field under UEFI dbx.

2. List the updates available from RHEL:

   # ls /usr/share/dbxtool/

3. Select the most recent update file for your architecture. The file names use the following format:

   DBXUpdate-date-architecture.cab

4. Install the selected update file:

   # fwupdmgr install /usr/share/dbxtool/DBXUpdate-date-architecture.cab

5. At the end of the update, fwupdmgr asks you to reboot the system. Confirm the reboot.