carta
sbverify(1)

sbverify1

Uefi secure boot verification tool

Usage

sbverify [options] --cert <certfile> <efi-boot-image>

Overview

Verify a UEFI secure boot image.

Options

--cert <certfile>

certificate (x509 certificate)

--list

list all signatures (but don't verify)

--detached <file>

read signature from <file>, instead of looking for an embedded signature

History

  • Arch Linux 2026-11-01: the text shown here
  • Debian 13 (Trixie)
  • Debian 12 (Bookworm)
  • Debian 11 (Bullseye) to Debian 10 (Buster)
  • Debian 9 (Stretch)

--list since Debian 10 (Buster).

--no-verify until Debian 9 (Stretch).

From sbsigntools 0.9.5-4 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.