authvar — handles authenticated variables for pesign
Contents
Description
authvar is a command line utility for handling authenticated UEFI variables.
Name
authvar — handles authenticated variables for pesign
Options
-a | --append
Append to variable
-c | --clear
Clear variable
-s | --set
set variable
-N ⟨{guid} | namespace⟩ | --namespace ⟨{guid} | namespace⟩
Variable is in namespace or {guid} (default: global)
Use -Nhelp to list namespaces.
-nname | --namename
Variable name-vvalue | --valuevalue
Set or append value to variable
-ffile | --valuefilefile
Read value from file-ttime | --timestamptime
Timestamp for the variable (default: now)
-ddirectory | --certdirdirectory
Specify nss certificate database directory (default: /etc/pki/pesign)
-Snickname | --signnickname
Sign variable with certificate nickname from the NSS database
-ifile | --importfile
Import variable from file-efile | --exportfile
Export variable to file instead of setting it in firmware
See Also
pesign(1), certutil(1)
Standards
B. Kaliski, PKCS#7:CryptographicMessageSyntaxv1.5, InternetEngineeringTaskForce, RFC 2315,
https://tools.ietf.org/html/rfc2315 , March 1998.
K. Moriarty, M. Nyström, S. Parkinson, A. Rusch, and M. Scott, PKCS#12:PersonalInformationExchangeSyntaxv1.1, InternetEngineeringTaskForce, RFC 7292, https://tools.ietf.org/html/rfc7292 , July 2014.
PKCS11 Technical Committee, PKCS#11:CryptographicTokenInterfaceStandard, OASIS,
https://www.cryptsoft.com/pkcs11doc/ .
UEFI Specification Working Group, UnifiedExtensibleFirmwareInterface(UEFI)SpecificationVersion2.8,
UnifiedExtensibleFirmwareInterfaceForum, https://uefi.org/specifications , March 2019.
Synopsis
authvar ⟨-a | -c | -s⟩ -N{guid}-nname ⟨-vvalue | -ffile⟩ [-ttime] [-ddirectory] [-Snickname]
[-ifile] [-efile]
