mokutil

linux

Configure Secure Boot Machine Owner Keys (MOK). Some operations, such as enabling and disabling Secure Boot or enrolling keys require a reboot.

Options (3)

-l, --list-enrolledboolean

List enrolled keys

Example: mokutil {{[-l|--list-enrolled]}}

-i, --importboolean

Enroll a new key

Example: mokutil {{[-i|--import]}} {{path/to/key.der}}

-N, --list-newboolean

List the keys to be enrolled

Example: mokutil {{[-N|--list-new]}}

Show if Secure Boot is enabled

mokutil --sb-state

Enable Secure Boot

mokutil --enable-validation

Disable Secure Boot

mokutil --disable-validation

List enrolled keys

mokutil [-l|--list-enrolled]

Enroll a new key

mokutil [-i|--import] path/to/key.der

List the keys to be enrolled

mokutil [-N|--list-new]

Set shim verbosity

mokutil --set-verbosity true