How to Manually Verify the elfsign Signature

Verified boot is an automatic mechanism that provides a quick and efficient way to ensure the integrity of the boot process. However, you can still verify a kernel module's signature manually.

• Use the elfsign command syntax as follows:

  $ elfsign verify -v kernel_module

  For example:

  $ elfsign verify -v /kernel/misc/sparcv9/cardbus
  elfsign: verification of /kernel/misc/sparcv9/cardbus passed.
  format: rsa_sha1.
  signer: O=Oracle Corporation, OU=Corporate Object Signing, \
                 OU=Solaris Signed Execution, CN=Solaris 11