[MAN] sbvarsign

Content-type: text/html; charset=UTF-8

SBVARSIGN

Section: User Commands (1)
Updated: March 2022
Index Return to Main Contents

---

 

NAME

sbvarsign - UEFI authenticated variable signing tool  

SYNOPSIS

sbvarsign [,options/] ,--key <keyfile> --cert <certfile> <var-name> <var-data-file>/  

DESCRIPTION

Sign a blob of data for use in SetVariable().  

OPTIONS

--engine <eng>

use the specified engine to load the key

--key <keyfile>

signing key (PEM-encoded RSA private key)

--cert <certfile>

certificate (x509 certificate)

--include-attrs

include attrs at beginning of output file

--guid <GUID>

EFI GUID for the variable. If omitted, EFI_IMAGE_SECURITY_DATABASE or EFI_GLOBAL_VARIABLE (depending on <var-name>) will be used.

--attr <attrs>

variable attributes. One or more of: NON_VOLATILE BOOTSERVICE_ACCESS RUNTIME_ACCESS TIME_BASED_AUTHENTICATED_WRITE_ACCESS APPEND_WRITE

Separate multiple attrs with a comma,

default is all attributes, TIME_BASED_AUTH... is always included.

--output <file>

write signed data to <file> (default <var-data-file>.signed)

---

 

Index

NAME

SYNOPSIS

DESCRIPTION

OPTIONS

---

This document was created by man2html, using the manual pages.
Time: 04:45:22 GMT, September 16, 2022