CERT-TO-EFI-SIG-LIST(1)

📦
version 1.9.2 · 11 versions
, in alpine 3.23, alpine 3.24, fedora 43

💅 NAME 💅

ok so cert-to-efi-sig-list — bestie, it's literally a tool for converting openssl certificates into EFI signature lists. that's the whole vibe. that's the job. 🎀

(it's from the User Commands corner of the manual, and yes this is CERT-TO-EFI-SIG-LIST(1), so you're in the right place 🌸)

✨ SYNOPSIS ✨

cert-to-efi-sig-list [-g <guid>] <crt file> <efi sig list file>

🦋 DESCRIPTION 🦋

okay so here's the tea: you hand it an input X509 certificate (and it's gotta be in PEM format, no cap), and it converts that baby into an EFI signature list file. and what's inside that file? just that single certificate. one cert, one file, iconic. 💖

🔥 OPTIONS 🔥

  • -g <guid> — use <guid> as the owner of the signature. and if you don't supply it? no big deal, an all zero guid gets used instead. lowkey the default, but like, valid 💅

🌈 EXAMPLES 🌈

so like, to take a standard X509 certificate in PEM format and produce an output EFI signature list file, simply do:

cert-to-efi-sig-list PK.crt PK.esl

and here's the part that ate: note that the format of EFI signature list files is such that they can simply be concatenated to produce a file with multiple signatures:

cat PK1.esl PK2.esl > PK.esl

fr fr. just cat them together. so easy. 💀✨

also — if your platform has a setup mode key manipulation ability, the keys will often only be displayed by GUID. which means using the -g option to give your keys recognisable GUIDs will be super useful if you plan to manage lots of keys. literally name your children, bestie. 🫶 it's giving organized. it's giving main character energy. 👑

💜 SEE ALSO 💜

  • sign-efi-sig-list(1) — for all the details on how to create an authenticated update to EFI secure variables when the EFI system is in user mode. go read that one next, iykyk ⭐
ngl this one's short and sweet but don't sleep on it. the cat trick alone? chefs kiss 🎀

ok bye ily! this masterpiece is from cert-to-efi-sig-list 1.9.2, dated August 2025 — go forth and sign your lists, bestie 🧚💖

📦 where this page comes from