Arch manual pages

SBSIGN(1) User Commands SBSIGN(1)

NAME

sbsign - UEFI secure boot signing tool

SYNOPSIS

sbsign [ options] --key <keyfile> --cert <certfile> <efi-boot-image>

DESCRIPTION

Sign an EFI boot image for use with secure boot.

OPTIONS

--key <keyfile>
signing key (PEM-encoded RSA private key)
--cert <certfile>
certificate (x509 certificate)
--detached
write a detached signature, instead of a signed binary
--output <file>
write signed data to <file> (default <efi-boot-image>.signed, or <efi-boot-image>.pk7 for detached signatures)
March 2017 sbsign 0.8