NAME
sbsign - UEFI secure boot signing tool
SYNOPSIS
sbsign [options] --key <keyfile> --cert <certfile> <efi-boot-image>
DESCRIPTION
Sign an EFI boot image for use with secure boot.
OPTIONS
- --engine <eng>
-
use the specified engine to load the key
- --key <keyfile>
-
signing key (PEM-encoded RSA private key)
- --cert <certfile>
-
certificate (x509 certificate)
--addcert <addcertfile> additional intermediate certificates in a file
- --detached
-
write a detached signature, instead of a signed binary
- --output <file>
-
write signed data to <file> (default <efi-boot-image>.signed, or <efi-boot-image>.pk7 for detached signatures)