Man Pages

SBVARSIGN


NAME
SYNOPSIS
DESCRIPTION
OPTIONS

NAME

sbvarsign - UEFI authenticated variable signing tool

SYNOPSIS

sbvarsign [options] --key <keyfile> --cert <certfile> <var-name> <var-data-file>

DESCRIPTION

Sign a blob of data for use in SetVariable().

OPTIONS

−−key <keyfile>

signing key (PEM−encoded RSA private key)

−−cert <certfile>

certificate (x509 certificate)

−−include−attrs

include attrs at beginning of output file

−−guid <GUID>

EFI GUID for the variable. If omitted, EFI_IMAGE_SECURITY_DATABASE or EFI_GLOBAL_VARIABLE (depending on <var−name>) will be used.

−−attr <attrs>

variable attributes. One or more of: NON_VOLATILE BOOTSERVICE_ACCESS RUNTIME_ACCESS TIME_BASED_AUTHENTICATED_WRITE_ACCESS APPEND_WRITE

Separate multiple attrs with a comma,

default is all attributes, TIME_BASED_AUTH... is always included.

−−output <file>

write signed data to <file> (default <var−data−file>.signed)

© 2018-2020 SourceBinary.com Inc.
Microsoft Windows, XP, Vista are registered trademarks of Microsoft Corporation