CmdID

CmdID / Commands

sbctl

A user-friendly secure boot key manager. tldr-pages

On Linux

Opens CmdID with your command. It is read in your browser and sent nowhere.

Linux

from tldr-pages, CC BY 4.0

A user-friendly secure boot key manager. Note: Not enrolling Microsoft's certificates can brick your system. See <https://github.com/Foxboron/sbctl/wiki/FAQ#option-rom>.

Show the current secure boot status

sbctl statusIdentify

Create custom secure boot keys (by default, everything is stored in /var/lib/sbctl)

sbctl create-keysIdentify

Enroll the custom secure boot keys and Microsoft's UEFI vendor certificates

sbctl enroll-keys --microsoftIdentify

Automatically run create-keys and enroll-keys based on the settings in /etc/sbctl/sbctl.conf

sbctl setup --setupIdentify

Sign an EFI binary with the created key and save the file to the database

sbctl sign --save path/to/efi_binaryIdentify

Re-sign all the saved files

sbctl sign-allIdentify

Verify that all EFI executables on the EFI system partition have been signed

sbctl verifyIdentify