sbvarsign (1) - Linux Manuals

sbvarsign: UEFI authenticated variable signing tool

Command to display sbvarsign manual in Linux: $ man 1 sbvarsign

sbvarsign - UEFI authenticated variable signing tool

sbvarsign [,options/] ,--key <keyfile> --cert <certfile> <var-name> <var-data-file>/

Sign a blob of data for use in SetVariable().

--engine <eng>: use the specified engine to load the key
--key <keyfile>: signing key (PEM-encoded RSA private key)
--cert <certfile>: certificate (x509 certificate)
--include-attrs: include attrs at beginning of output file
--guid <GUID>: EFI GUID for the variable. If omitted, EFI_IMAGE_SECURITY_DATABASE or EFI_GLOBAL_VARIABLE (depending on <var-name>) will be used.
--attr <attrs>: variable attributes. One or more of: NON_VOLATILE BOOTSERVICE_ACCESS RUNTIME_ACCESS TIME_BASED_AUTHENTICATED_WRITE_ACCESS APPEND_WRITE
Separate multiple attrs with a comma,: default is all attributes, TIME_BASED_AUTH... is always included.
--output <file>: write signed data to <file> (default <var-data-file>.signed)