Manage Thunderbolt devices with boltctl

boltctl lists connected Thunderbolt/USB4 docks and drives, whether they are authorized, and lets you enroll or forget them.

LinuxhardwarethunderboltDiagnosticsLow risk
Run `boltctl`; for a device that shows `status: connected`, authorize it with `boltctl authorize <uuid>` or enroll it permanently with `boltctl enroll <uuid>`.

01Command

Command
$ boltctl

02What it does

Boltd is the user-space daemon that handles Thunderbolt security on Linux. Depending on the firmware security level, new devices must be authorized before they function — typically by approving the GNOME notification. boltctl is the command-line equivalent, and `boltctl list` output includes the security level of the controller.

03Risk

RiskLow risk
Requirementsbolt package (Preinstalled on most GNOME systems)
!Warning: A dock that shows as connected but not authorized will not pass through displays or USB. If authorization keeps failing, check the BIOS Thunderbolt security setting and set it to 'user' or 'secure' rather than 'none' with slcm issues.

04Undo

Undo
$ boltctl forget <uuid>  (removes a saved device)

05Sources

Last verified: 2026-09-18 · Category: System & Settings

06Related solutions