{
    "mode": "man",
    "parameter": "sbvarsign",
    "section": "1",
    "url": "https://www.chedong.com/phpMan.php/man/sbvarsign/1/json",
    "generated": "2026-09-01T10:55:06Z",
    "synopsis": "sbvarsign [options] --key <keyfile> --cert <certfile> <var-name> <var-data-file>",
    "sections": {
        "NAME": {
            "content": "sbvarsign - UEFI authenticated variable signing tool\n",
            "subsections": []
        },
        "SYNOPSIS": {
            "content": "sbvarsign [options] --key <keyfile> --cert <certfile> <var-name> <var-data-file>\n",
            "subsections": []
        },
        "DESCRIPTION": {
            "content": "Sign a blob of data for use in SetVariable().\n",
            "subsections": []
        },
        "OPTIONS": {
            "content": "--engine <eng>\nuse the specified engine to load the key\n\n--key <keyfile>\nsigning key (PEM-encoded RSA private key)\n\n--cert <certfile>\ncertificate (x509 certificate)\n",
            "subsections": [
                {
                    "name": "--include-attrs",
                    "content": "include attrs at beginning of output file\n\n--guid <GUID>\nEFI GUID for the variable. If omitted, EFIIMAGESECURITYDATABASE or EFIGLOBALVARI‐\nABLE (depending on <var-name>) will be used.\n\n--attr <attrs>\nvariable  attributes.  One  or more of: NONVOLATILE BOOTSERVICEACCESS RUNTIMEACCESS\nTIMEBASEDAUTHENTICATEDWRITEACCESS APPENDWRITE\n\nSeparate multiple attrs with a comma,\ndefault is all attributes, TIMEBASEDAUTH... is always included.\n\n--output <file>\nwrite signed data to <file> (default <var-data-file>.signed)\n\nsbvarsign 0.9.4                              April 2024                                 SBVARSIGN(1)",
                    "long": "--include-attrs"
                }
            ]
        }
    },
    "summary": "sbvarsign - UEFI authenticated variable signing tool",
    "flags": [
        {
            "flag": "",
            "long": "--include-attrs",
            "arg": null,
            "description": "include attrs at beginning of output file --guid <GUID> EFI GUID for the variable. If omitted, EFIIMAGESECURITYDATABASE or EFIGLOBALVARI‐ ABLE (depending on <var-name>) will be used. --attr <attrs> variable attributes. One or more of: NONVOLATILE BOOTSERVICEACCESS RUNTIMEACCESS TIMEBASEDAUTHENTICATEDWRITEACCESS APPENDWRITE Separate multiple attrs with a comma, default is all attributes, TIMEBASEDAUTH... is always included. --output <file> write signed data to <file> (default <var-data-file>.signed) sbvarsign 0.9.4 April 2024 SBVARSIGN(1)"
        }
    ],
    "examples": [],
    "see_also": []
}