NAME

       sbsign - UEFI secure boot signing tool

SYNOPSIS

       sbsign [options] --key <keyfile> --cert <certfile> <efi-boot-image>

DESCRIPTION

       Sign an EFI boot image for use with secure boot.

OPTIONS

       --key <keyfile>
              signing key (PEM-encoded RSA private key)

       --cert <certfile>
              certificate (x509 certificate)

       --detached
              write a detached signature, instead of a signed binary

       --output <file>
              write    signed    data    to    <file>    (default   <efi-boot-image>.signed,   or
              <efi-boot-image>.pk7 for detached signatures)