sbvarsign - UEFI authenticated variable signing tool

       Sign a blob of data for use in SetVariable().

       sbvarsign - UEFI authenticated variable signing tool

--engine <eng>
              use the specified engine to load the key

       --key <keyfile>
              signing key (PEM-encoded RSA private key)

       --cert <certfile>
              certificate (x509 certificate)

       --include-attrs
              include attrs at beginning of output file

       --guid <GUID>
              EFI  GUID  for  the  variable.  If  omitted,  EFI_IMAGE_SECURITY_DATABASE  or  EFI_GLOBAL_VARIABLE
              (depending on <var-name>) will be used.

       --attr <attrs>
              variable  attributes.   One   or   more   of:   NON_VOLATILE   BOOTSERVICE_ACCESS   RUNTIME_ACCESS
              TIME_BASED_AUTHENTICATED_WRITE_ACCESS APPEND_WRITE

       Separate multiple attrs with a comma,
              default is all attributes, TIME_BASED_AUTH... is always included.

       --output <file>
              write signed data to <file> (default <var-data-file>.signed)

sbvarsign 0.9.4                                    April 2024                                       SBVARSIGN(1)

sbvarsign [options] --key<keyfile>--cert<certfile><var-name><var-data-file>