pesigcheck1
Tool for verifying uefi applications
Usage
pesigcheck -i
file
[-n]
[-D
file]
[-X
file]
[-c
file]
[-q]
[-v]
Overview
pesigcheck is a command line tool for verifying the signature of UEFI applications.
Options
-ifile |--infile-
PE binary file to be checked
-
-n | --no-system-db -
inhibit the use of DB and DBX from the running system
-Dfile |--dbfilefile-
EFI Signature List or EFI variable file to be used as the allowed security database
may be used more than once
-Xfile |--dbxfilefile-
EFI Signature List or EFI variable file to be used as the blacklisted security database
may be used more than once
-cfile |--certfilefile-
DER-encoded certificate Ar file to be added to the allowed security database
may be used more than once
-
-q | --quiet -
be quieter
-
-v | --verbose -
be more verbose
History
- Arch Linux 2026-11-01 to Debian 13 (Trixie): the text shown here
- Debian 12 (Bookworm) to Debian 9 (Stretch)
--no-system-db since Debian 13 (Trixie);
--quiet since Debian 13 (Trixie);
--verbose since Debian 13 (Trixie);
-n since Debian 13 (Trixie);
-q since Debian 13 (Trixie);
-v since Debian 13 (Trixie).
--in until Debian 12 (Bookworm).