sbvarsign (1) Linux Manual Page
NAME
sbvarsign – UEFI authenticated variable signing tool
SYNOPSIS
sbvarsign [,options/] ,–key <keyfile> –cert <certfile> <var-name> <var-data-file>/
DESCRIPTION
Sign a blob of data for use in SetVariable().
OPTIONS
–engine<eng>- use the specified engine to load the key
–key<keyfile>- signing key (PEM-encoded RSA private key)
–cert<certfile>- certificate (x509 certificate)
–include-attrs- include attrs at beginning of output file
–guid<GUID>- EFI GUID for the variable. If omitted, EFI_IMAGE_SECURITY_DATABASE or EFI_GLOBAL_VARIABLE (depending on <var-name>) will be used.
–attr<attrs>- variable attributes. One or more of: NON_VOLATILE BOOTSERVICE_ACCESS RUNTIME_ACCESS TIME_BASED_AUTHENTICATED_WRITE_ACCESS APPEND_WRITE
- Separate multiple attrs with a comma,
- default is all attributes, TIME_BASED_AUTH… is always included.
–output<file>- write signed data to <file> (default <var-data-file>.signed)