diff --git a/modules/linux/secureboot.nix b/modules/linux/secureboot.nix
index b192d4d..bcf9780 100644
--- a/modules/linux/secureboot.nix
+++ b/modules/linux/secureboot.nix
@@ -9,6 +9,6 @@
 
   boot.lanzaboote = {
     enable = true;
-    pkiBundle = "/etc/secureboot";
+    pkiBundle = "/var/lib/sbctl";
   };
 }