tldr/pages/linux/mokutil.md

34 lines
601 B
Markdown

# mokutil
> Configure Secure Boot Machine Owner Keys (MOK).
> Some operations, such as enabling and disabling Secure Boot or enrolling keys require a reboot.
> More information: <https://github.com/lcp/mokutil>.
- Show if Secure Boot is enabled:
`mokutil --sb-state`
- Enable Secure Boot:
`mokutil --enable-validation`
- Disable Secure Boot:
`mokutil --disable-validation`
- List enrolled keys:
`mokutil --list-enrolled`
- Enroll a new key:
`mokutil --import {{path/to/key.der}}`
- List the keys to be enrolled:
`mokutil --list-new`
- Set shim verbosity:
`mokutil --set-verbosity true`