NAME

       sbvarsign - UEFI authenticated variable signing tool

SYNOPSIS

       sbvarsign [options] --key <keyfile> --cert <certfile> <var-name> <var-data-file>

DESCRIPTION

       Sign a blob of data for use in SetVariable().

OPTIONS

       --key <keyfile>
              signing key (PEM-encoded RSA private key)

       --cert <certfile>
              certificate (x509 certificate)

       --include-attrs
              include attrs at beginning of output file

       --guid <GUID>
              EFI  GUID  for  the  variable.  If  omitted,  EFI_IMAGE_SECURITY_DATABASE  or  EFI_GLOBAL_VARIABLE
              (depending on <var-name>) will be used.

       --attr <attrs>
              variable  attributes.   One   or   more   of:   NON_VOLATILE   BOOTSERVICE_ACCESS   RUNTIME_ACCESS
              TIME_BASED_AUTHENTICATED_WRITE_ACCESS APPEND_WRITE

              Separate  multiple  attrs  with  a  comma, default is all attributes, TIME_BASED_AUTH... is always
              included.

       --output <file>
              write signed data to <file> (default <var-data-file>.signed)