Man page - pesign-client(1)

Packages contains this manual

Manual


PESIGN-CLIENT (1) General Commands Manual PESIGN-CLIENT (1)

NAME

pesign-client — tool for signing UEFI applications with a pesign server

SYNOPSIS

pesign-client [ -i file ] [ -o file ] [ -e file ] [ -t token ] [ -c nickname ] ⟨

[ -k |] [ -q |] [ -s |] [ -u ] ⟩ [ -f fd ] [ -F file ]

DESCRIPTION

pesign-client is a command line tool for manipulating signatures and cryptographic digests of UEFI applications.

OPTIONS
-i
file | --infile file

The input binary file to be signed with --sign

-o file | --outfile file

The output binary file to be signed with --sign

-e file | --export file

Export signature from --sign to file

-t token | --token token

Sign using NSS token token

-c nickname | --certificate nickname

Sign using NSS certificate nickname

-k | --kill

Kill the pesign server

-q | --is-unlocked

Query the lock status of the token specified by --token

-s | --sign

Sign the file specified by --infile

-u | --unlock

Unlock the token specified with --token using the PIN read from --pinfd or --pinfile , or specified by PESIGN_TOKEN_PIN

-f fd | --pinfd fd

File descriptor to read the PIN from for --unlock

-F file | --pinfile file

File to read the PIN from for unlock

ENVIRONMENT
PESIGN_TOKEN_PIN

PIN for use with --unlock for the token specified by -fl -token

SEE ALSO

pesign (1), certutil (1)

AUTHORS

Peter Jones Linux Jun 4, 2020$ PESIGN-CLIENT (1)