Manual: sbsign
SBSIGN(1) User Commands SBSIGN(1)
NAME
sbsign - UEFI secure boot signing tool
SYNOPSIS
sbsign [options] --key --cert
DESCRIPTION
Sign an EFI boot image for use with secure boot.
OPTIONS
--engine
use the specified engine to load the key
--key
signing key (PEM-encoded RSA private key)
--cert
certificate (x509 certificate)
--addcert additional intermediate certificates in a file
--detached
write a detached signature, instead of a signed binary
--output
write signed data to (default .signed, or .pk7 for detached signatures)
sbsign 0.9.4 March 2026 SBSIGN(1)