Manual: sbvarsign

SBVARSIGN(1)						User Commands						SBVARSIGN(1)

NAME
       sbvarsign - UEFI authenticated variable signing tool

SYNOPSIS
       sbvarsign [options] --key  --cert   

DESCRIPTION
       Sign a blob of data for use in SetVariable().

OPTIONS
       --engine 
	      use the specified engine to load the key

       --key 
	      signing key (PEM-encoded RSA private key)

       --cert 
	      certificate (x509 certificate)

       --include-attrs
	      include attrs at beginning of output file

       --guid 
	      EFI  GUID	 for  the  variable.  If  omitted,  EFI_IMAGE_SECURITY_DATABASE or EFI_GLOBAL_VARIABLE (depending on
	      ) will be used.

       --attr 
	      variable attributes. One or  more	 of:  NON_VOLATILE  BOOTSERVICE_ACCESS	RUNTIME_ACCESS	TIME_BASED_AUTHENTI‐
	      CATED_WRITE_ACCESS APPEND_WRITE

       Separate multiple attrs with a comma,
	      default is all attributes, TIME_BASED_AUTH... is always included.

       --output 
	      write signed data to  (default .signed)

sbvarsign 0.9.4						 March 2026						SBVARSIGN(1)