sbattach(1) on Linux
The text d21da5ae28a3, as Debian 13 (Trixie) shipped it.
UEFI secure boot detached signature tool
Flags it lists
-
--attach -
--detach -
--remove -
--signum