sbsign (1) Linux Manual Page
NAME
sbsign – UEFI secure boot signing tool
SYNOPSIS
sbsign [,options/] ,–key <keyfile> –cert <certfile> <efi-boot-image>/
DESCRIPTION
Sign an EFI boot image for use with secure boot.
OPTIONS
–engine<eng>- use the specified engine to load the key
–key<keyfile>- signing key (PEM-encoded RSA private key)
–cert<certfile>- certificate (x509 certificate)
-
–addcert<addcertfile> additional intermediate certificates in a file–detached -
- write a detached signature, instead of a signed binary
–output<file>- write signed data to <file> (default <efi-boot-image>.signed, or <efi-boot-image>.pk7 for detached signatures)