<!--
{
  "availability" : [
    "macOS: 27.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "Virtualization",
  "identifier" : "/documentation/Virtualization/VZEFISignatureDatabaseConfiguration",
  "metadataVersion" : "0.1.0",
  "role" : "Class",
  "symbol" : {
    "kind" : "Class",
    "modules" : [
      "Virtualization"
    ],
    "preciseIdentifier" : "c:objc(cs)VZEFISignatureDatabaseConfiguration"
  },
  "title" : "VZEFISignatureDatabaseConfiguration"
}
-->

# VZEFISignatureDatabaseConfiguration

A container for Unified Extensible Firmware Interface (UEFI) Secure Boot signature lists.

```
class VZEFISignatureDatabaseConfiguration
```

## Overview

This class represents the signature lists used in UEFI Secure Boot configuration. It contains three
separate arrays, one for each UEFI signature database, which are:

- Key Exchange Key (KEK): This list contains keys authorized to update the db and dbx databases. The array
  acts as a bridge between the platform owner (who controls the Platform Key) and operating system vendors.
- Allowed Signature Database (db): An “allow list” of trusted UEFI applications, bootloaders, and
  drivers. The EFI boot loader allows code signed by these signatures to execute during boot.
- Forbidden Signature Database (dbx): A “deny list” of revoked or malicious signatures. The EFI boot loader
  blocks code matching these signatures from running, even if it matches a signature in the db database.

## See Also

[`VZEFISignatureList`](/documentation/Virtualization/VZEFISignatureList)

A class that represents a Unified Extensible Firmware Interface (UEFI) signature list.

[`VZEFIVariableStore`](/documentation/Virtualization/VZEFIVariableStore)

An object that represents the Extensible Firmware Interface (EFI) variable store that contains NVRAM variables the EFI exposes.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)