sbvarsign - UEFI authenticated variable signing tool
sbvarsign [options] --key <keyfile> --cert <certfile> <var-name> <var- data-file>
SBVARSIGN(1) User Commands SBVARSIGN(1)
NAME
sbvarsign - UEFI authenticated variable signing tool
SYNOPSIS
sbvarsign [options] --key <keyfile> --cert <certfile> <var-name> <var-
data-file>
DESCRIPTION
Sign a blob of data for use in SetVariable().
OPTIONS
--key <keyfile>
signing key (PEM-encoded RSA private key)
--cert <certfile>
certificate (x509 certificate)
--include-attrs
include attrs at beginning of output file
--guid <GUID>
EFI GUID for the variable. If omitted, EFI_IMAGE_SECURITY_DATA-
BASE or EFI_GLOBAL_VARIABLE (depending on <var-name>) will be
used.
--attr <attrs>
variable attributes. One or more of: NON_VOLATILE BOOTSER-
VICE_ACCESS RUNTIME_ACCESS TIME_BASED_AUTHENTICATED_WRITE_ACCESS
APPEND_WRITE
Separate multiple attrs with a comma,
default is all attributes, TIME_BASED_AUTH... is always
included.
--output <file>
write signed data to <file> (default <var-data-file>.signed)
ATTRIBUTES
See attributes(7) for descriptions of the following attributes:
+---------------+----------------------+
|ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+---------------+----------------------+
|Availability | developer/sbsigntool |
+---------------+----------------------+
|Stability | Uncommitted |
+---------------+----------------------+
NOTES
Source code for open source software components in Oracle Solaris can
be found at https://www.oracle.com/downloads/opensource/solaris-source-
code-downloads.html.
This software was built from source available at
https://github.com/oracle/solaris-userland. The original community
source was downloaded from https://launchpad.net/ubuntu/+archive/pri-
mary/+files/sbsigntool_0.6.orig.tar.gz.
Further information about this software can be found on the open source
community website at https://launchpad.net/ubuntu/+source/sbsigntool.
sbvarsign 0.6 June 2022 SBVARSIGN(1)