22.3. Applying an offline Revocation List update
On a system with no internet connection, you can update the Secure Boot Revocation List from Red Hat Enterprise Linux so that Secure Boot prevents known security issues. This procedure is safe and ensures that the update does not prevent your system from booting.
Procedure
Identify the current version of the Revocation List:
# *fwupdmgr get-devices*See the
Current versionfield underUEFI dbx.List the updates available from RHEL:
# *ls /usr/share/dbxtool/*Select the most recent update file for your architecture. The file names use the following format:
DBXUpdate-date-architecture.cabInstall the selected update file:
# fwupdmgr install /usr/share/dbxtool/DBXUpdate-date-architecture.cab-
At the end of the update,
fwupdmgrasks you to reboot the system. Confirm the reboot.
Verification
After the reboot, check the current version of the Revocation List again:
# *fwupdmgr get-devices*