Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
UEFISIGN(8)		    System Manager's Manual		   UEFISIGN(8)

NAME
       uefisign	-- UEFI	Secure Boot signing utility

SYNOPSIS
       uefisign	-k key -c certificate -o output	[-v] file
       uefisign	-V [-v]	file

DESCRIPTION
       The  uefisign  utility signs PE binary files using Authenticode scheme,
       as required by UEFI Secure Boot specification.  Alternatively,  it  can
       be  used	 to  view  and	verify existing	signatures.  These options are
       available:

       -V  Determine whether the file is signed.  Note that this does not ver-
	   ify the correctness of the signature; only that the file contains a
	   signature.

       -k  Name	of file	containing the private key used	to sign	the binary.

       -c  Name	of file	containing the certificate used	to sign	the binary.

       -o  Name	of file	to write the signed binary to.

       -v  Be verbose.

EXIT STATUS
       The uefisign utility exits 0 on success,	and >0 if an error occurs.

EXAMPLES
       Generate	self-signed certificate	and use	it to sign a binary:
	     /usr/share/examples/uefisign/uefikeys testcert
	     uefisign -c testcert.pem -k testcert.key -o signed-binary binary

       View signature:
	     uefisign -Vv binary

SEE ALSO
       openssl(1), loader(8), uefi(8)

HISTORY
       The uefisign command appeared in	FreeBSD	10.2.

AUTHORS
       The  uefisign  utility  was  developed  by  Edward   Tomasz   Napierala
       <trasz@FreeBSD.org> under sponsorship from the FreeBSD Foundation.

FreeBSD	13.2			 July 11, 2015			   UEFISIGN(8)

NAME | SYNOPSIS | DESCRIPTION | EXIT STATUS | EXAMPLES | SEE ALSO | HISTORY | AUTHORS

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=uefisign&sektion=8&manpath=FreeBSD+14.2-RELEASE+and+Ports>

home | help