diff --git a/modules/common/boot.nix b/modules/common/boot.nix
index 2b785cb..9b78fb7 100644
--- a/modules/common/boot.nix
+++ b/modules/common/boot.nix
@@ -27,7 +27,7 @@ with lib;
         {
           lanzaboote = {
             enable = true;
-            pkiBundle = "/etc/secureboot";
+            pkiBundle = "/var/lib/sbctl";
           };
         }
       else