Scroll to navigation
| SBVARSIGN(1) |
User Commands |
SBVARSIGN(1) |
NAME¶
sbvarsign - UEFI authenticated variable signing tool
SYNOPSIS¶
sbvarsign [options] --key <keyfile> --cert
<certfile> <var-name> <var-data-file>
DESCRIPTION¶
Sign a blob of data for use in SetVariable().
OPTIONS¶
- --engine <eng>
- use the specified engine to load the key
- --key <keyfile>
- signing key (PEM-encoded RSA private key)
- --cert <certfile>
- certificate (x509 certificate)
- --include-attrs
- include attrs at beginning of output file
- --guid <GUID>
- EFI GUID for the variable. If omitted, EFI_IMAGE_SECURITY_DATABASE or
EFI_GLOBAL_VARIABLE (depending on <var-name>) will be used.
- --attr <attrs>
- variable attributes. One or more of: NON_VOLATILE BOOTSERVICE_ACCESS
RUNTIME_ACCESS TIME_BASED_AUTHENTICATED_WRITE_ACCESS APPEND_WRITE
- Separate multiple attrs with a comma,
- default is all attributes, TIME_BASED_AUTH... is always included.
- --output <file>
- write signed data to <file> (default
<var-data-file>.signed)
