sbsign1
Uefi secure boot signing tool
Usage
sbsign [options]
--key
<keyfile>
--cert
<certfile>
<efi-boot-image>
Overview
Sign an EFI boot image for use with secure boot.
Options
-
--engine <eng> -
use the specified engine to load the key
-
--key <keyfile> -
signing key (PEM-encoded RSA private key)
-
--cert <certfile> -
certificate (x509 certificate)
--addcert <addcertfile> additional intermediate certificates in a file
-
--detached -
write a detached signature, instead of a signed binary
-
--output <file> -
write signed data to <file> (default <efi-boot-image>.signed, or <efi-boot-image>.pk7 for detached signatures)
Releases
6 releases since Debian 9 (Stretch); the text changed 4 times.
--engine since Debian 10 (Buster).