Reference

pesigcheck(1)

tool for verifying UEFI applications

NAME

pesigcheck – tool for verifying UEFI applications

SYNOPSIS

pesigcheck -i file [-n] [-D file] [-X file] [-c file] [-q] [-v]

DESCRIPTION

pesigcheck is a command line tool for verifying the signature of UEFI applications.

OPTIONS

-i file | --in file

PE binary file to be checked

-n | --no-system-db

inhibit the use of DB and DBX from the running system

-D file | --dbfile file

EFI Signature List or EFI variable file to be used as the allowed security database

may be used more than once

-X file | --dbxfile file

EFI Signature List or EFI variable file to be used as the blacklisted security database

may be used more than once

-c file | --certfile file

DER-encoded certificate Ar file to be added to the allowed security database

may be used more than once

-q | --quiet

be quieter

-v | --verbose

be more verbose

STANDARDS

UEFI Specification Working Group, Unified Extensible Firmware Interface (UEFI) Specification Version 2.8, Unified Extensible Firmware Interface Forum, March 2019, https://uefi.org/specifications .

SEE ALSO

authvar(1), pesign(1), efisigdb(1)

AUTHORS

Peter Jones

History

--no-system-db since Debian 13 (Trixie); --quiet since Debian 13 (Trixie); --verbose since Debian 13 (Trixie); -n since Debian 13 (Trixie); -q since Debian 13 (Trixie); -v since Debian 13 (Trixie).

--in until Debian 12 (Bookworm).