sbctl – create, enroll and manage Secure Boot keys

sbctl is a command-line utility for creating, enrolling and managing Secure Boot keys. It keeps track of files that need to be signed as part of the boot chain and can verify signatures on files stored in the EFI System Partition.

The software can import, export and rotate keys, sign EFI binaries and Unified Kernel Images, and report the system’s Secure Boot status.

This is free and open source software.

Key Features

• Create and manage Secure Boot signing keys.
• Enroll keys directly into EFI variables.
• Sign EFI binaries, kernels and Unified Kernel Images.
• Maintain a database of files that require signing.
• Verify signatures on files in the EFI System Partition.
• Import, export and rotate Secure Boot keys.
• Display Secure Boot, Setup Mode and installation status.
• Sign all registered files with a single command.
• Generate EFI stub bundles.
• Support YubiKey hardware-backed signing keys.
• Produce machine-readable JSON output.

Website: github.com/Foxboron/sbctl
Support:
Developer: Morten Linderud
License: MIT License

sbctl is written in Go. Learn Go with our recommended free books and free tutorials.

Related Software

Read our verdict in the software roundup.

Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category. This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form.