mokutil
Configure Secure Boot Machine Owner Keys (MOK). tldr-pages
On Linux
Linux
Configure Secure Boot Machine Owner Keys (MOK). Some operations, such as enabling and disabling Secure Boot or enrolling keys require a reboot.
Show if Secure Boot is enabled
mokutil --sb-stateIdentifyEnable Secure Boot
mokutil --enable-validationIdentifyDisable Secure Boot
mokutil --disable-validationIdentifyList enrolled keys
mokutil --list-enrolledIdentifyEnroll a new key
mokutil --import path/to/key.derIdentifyList the keys to be enrolled
mokutil --list-newIdentifySet shim verbosity
mokutil --set-verbosity trueIdentify