diff --git a/pages/linux/mokutil.md b/pages/linux/mokutil.md new file mode 100644 index 000000000..0d78caed9 --- /dev/null +++ b/pages/linux/mokutil.md @@ -0,0 +1,33 @@ +# mokutil + +> Configure Secure Boot Machine Owner Keys (MOK). +> Some operations, such as enabling and disabling Secure Boot or enrolling keys require a reboot. +> More information: . + +- Show if Secure Boot is enabled: + +`mokutil --sb-state` + +- Enable Secure Boot: + +`mokutil --enable-validation` + +- Disable Secure Boot: + +`mokutil --disable-validation` + +- List enrolled keys: + +`mokutil --list-enrolled` + +- Enroll a new key: + +`mokutil --import {{path/to/key.der}}` + +- List the keys to be enrolled: + +`mokutil --list-new` + +- Set shim verbosity: + +`mokutil --set-verbosity true`