Systems with Secure Boot enabled have portions of the system signed by entries in the Secure Boot DB. This package provides a mechanism for delivering updates to DB and the corresponding blacklist database, DBX.