Man1 - hash-to-efi-sig-list.1

hash-efi-sig-list - create a hash signature list entry from a binary

hash-to-efi-sig-list efi-binary /[/efi-binary /…] /efi-signature-list

Produce an EFI Signature List file containing the sha256 hash of the passed in EFI binary

none

To create a hash efi-signature-list in the file hash.esl from the binary HelloWorld.efi do

hash-efi-sig-list HelloWorld.efi hash.esl

This hash file can now be placed directly (or as an update) into the db variables with UpdateVar

sign-efi-sig-list(1) for details on how to produce authenticated update files for the db variable.