601 B

Raw Blame History

mokutil

Configure Secure Boot Machine Owner Keys (MOK). Some operations, such as enabling and disabling Secure Boot or enrolling keys require a reboot. More information: https://github.com/lcp/mokutil.

Show if Secure Boot is enabled:

mokutil --sb-state

Enable Secure Boot:

mokutil --enable-validation

Disable Secure Boot:

mokutil --disable-validation

List enrolled keys:

mokutil --list-enrolled

Enroll a new key:

mokutil --import {{path/to/key.der}}

List the keys to be enrolled:

mokutil --list-new

Set shim verbosity:

mokutil --set-verbosity true