2025-03-14 21:59:59 -06:00
|
|
|
# mokutil
|
|
|
|
|
|
|
|
|
|
> Configure Secure Boot Machine Owner Keys (MOK).
|
|
|
|
|
> Some operations, such as enabling and disabling Secure Boot or enrolling keys require a reboot.
|
2025-12-16 10:20:31 -07:00
|
|
|
> More information: <https://manned.org/mokutil>.
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Show if Secure Boot is enabled:
|
|
|
|
|
|
|
|
|
|
`mokutil --sb-state`
|
|
|
|
|
|
|
|
|
|
- Enable Secure Boot:
|
|
|
|
|
|
|
|
|
|
`mokutil --enable-validation`
|
|
|
|
|
|
|
|
|
|
- Disable Secure Boot:
|
|
|
|
|
|
|
|
|
|
`mokutil --disable-validation`
|
|
|
|
|
|
|
|
|
|
- List enrolled keys:
|
|
|
|
|
|
2025-12-16 10:20:31 -07:00
|
|
|
`mokutil {{[-l|--list-enrolled]}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Enroll a new key:
|
|
|
|
|
|
2025-12-16 10:20:31 -07:00
|
|
|
`mokutil {{[-i|--import]}} {{path/to/key.der}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- List the keys to be enrolled:
|
|
|
|
|
|
2025-12-16 10:20:31 -07:00
|
|
|
`mokutil {{[-N|--list-new]}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Set shim verbosity:
|
|
|
|
|
|
|
|
|
|
`mokutil --set-verbosity true`
|
