EFI-READVAR(1)

🎀 NAME 🎀

okay bestie, this is the manual page for efi-readvar — literally the tool for showing secure variables. That’s the whole vibe. 💅

---

✨ SYNOPSIS ✨

the shape of it is exactly this, no cap:

efi-readvar: [-v <var>] [-s <list>[-<entry>]] [-o <file>]

yes, the colon is in there. copy it exactly if you’re being fancy. 🫶

---

💖 DESCRIPTION 💖

with no arguments, efi-readvar prints out the entire secure variable database and expands the contents of hashes and X509 certificates. it’s giving “dump the whole thing and show me the details.” ✨

you can restrict it to specific variables and to specific signatures within variables, so you don’t have to stare at the entire database if you don’t want to. lowkey helpful.

now here’s the important numbering tea: EFI signature lists are numbered from zero and may contain one or more entries (also numbered from zero). so 0-0 represents the first entry of signature list zero. that’s the mapping, bestie — don’t forget it. 🧚

bottom line: it lists the contents of the UEFI signature databases. periodt. 💜

---

💅 OPTIONS 💅

• -v <var> — list only the contents of <var>. just the one variable, main character style. 🌸
• -s <list>[-<entry>] — list only a given signature list (and optionally only a given entry in that list). yes, you can zoom in one more level. 🔥
• -o <file> — output the requested signature lists to <file>. send it straight to a file instead of just vibing in the terminal. 🎀

---

🌈 EXAMPLES 🌈

to see all the variables, type:

efi-readvars

to see the second entry of signature list 1 for the db variable, do:

efi-readvars -v db -s 1-1

to see all entries of signature list 0 for the KEK:

efi-readvars -v KEK -s 0

copy those exactly, bestie — the examples literally use efi-readvars with an s, and we are not out here “fixing” command names. 😭

---

mwah 💋 this iconic little page is from efi-readvar 1.9.2, dated August 2025 — see you in the group chat, bestie 💖🦋