mokutil(1) on Linux
The text c67f860089f2, as Debian 12 (Bookworm), Debian 11 (Bullseye), Debian 10 (Buster) shipped it.
utility to manipulate machine owner keys
Flags it lists
-
--ca-check -
--clear-password -
--db -
--dbx -
--delete -
--delete-hash -
--disable-validation -
--enable-validation -
--export -
--generate-hash -
--hash-file -
--ignore-db -
--ignore-keyring -
--import -
--import-hash -
--kek -
--list-delete -
--list-enrolled -
--list-new -
--list-sbat-revocations -
--mokx -
--password -
--pk -
--reset -
--revoke-delete -
--revoke-import -
--root-pw -
--sb-state -
--set-fallback-noreboot -
--set-fallback-verbosity -
--set-verbosity -
--test-key -
--timeout -
--use-db -
-D -
-N -
-P -
-X -
-c -
-d -
-i -
-l -
-p -
-t -
-x