UEFISIGN(8)

💅 UEFISIGN(8) — like, the UEFI Secure Boot signing utility bestie ✨

okay so this is the uefisign page from the System Manager's Manual and honestly? she's iconic. buckle up 🎀

---

🌸 NAME 🌸

uefisign — the UEFI Secure Boot signing utility. yes that's her whole job and she ate 💅

---

🦋 SYNOPSIS 🦋

uefisign -k key -c certificate -o output [-v] file
uefisign -V [-v] file

two whole modes, two whole vibes, pick your fighter ✨

---

👑 DESCRIPTION 👑

okay so listen. the uefisign utility signs PE binary files using the Authenticode scheme — which is literally what the UEFI Secure Boot specification requires, no cap. so if you need your binary to pass the vibe check at boot time, this is the girl for the job 🔥

alternatively (and this is lowkey the fun part), you can use it to view and verify existing signatures. like reading someone's aura but for cryptography 🧚

these options are available:

• -V — figure out whether the file is signed at all. but bestie, read the fine print: this does not verify the correctness of the signature. it only checks that the file contains a signature. it's giving "yeah there's a signature in there somewhere" energy, not "this signature is valid" energy 💀
• -k — name of the file containing the private key used to sign the binary 🔑
• -c — name of the file containing the certificate used to sign the binary 🎀
• -o — name of the file to write the signed binary to 📝
• -v — be verbose. she talks more. we love a chatty queen 🗣️

---

⭐ EXIT STATUS ⭐

the uefisign utility exits 0 on success, and >0 if an error occurs. simple, clean, no drama 🫶

---

🌈 EXAMPLES 🌈

generate a self-signed certificate and use it to sign a binary

/usr/share/examples/uefisign/uefikeys testcert
uefisign -c testcert.pem -k testcert.key -o signed-binary binary

step one: make the keys. step two: sign the thing. step three: main character energy 👑

view signature

uefisign -Vv binary

the -V and the -v holding hands in one flag cluster, we love to see it 🥰

---

💜 SEE ALSO 💜

openssl(1), loader(8), uefi(8) — go read those too, iykyk 📚

---

🍓 HISTORY 🍓

the uefisign command appeared in FreeBSD 10.2. a legend was born ✨

---

🧚 AUTHORS 🧚

the uefisign utility was developed by Edward Tomasz Napierala <trasz@FreeBSD.org> under sponsorship from the FreeBSD Foundation. thank you for your service king 🫡💖

---

aaaaand that's the page!! this came to you from the Debian corner of the manual-verse, dated July 11, 2015 — she's a UEFISIGN(8) girlie through and through, mwah 💋🎀