1EFI-READVAR(1) User Commands EFI-READVAR(1)
2
3
4
6 efi-readvar - tool for showing secure variables
7
9 efi-readvar: [-v <var>] [-s <list>[-<entry>]] [-o <file>]
10
12 with no arguments, prints out the entire secure variable database and
13 expands the contents of hashes and X509 certificates. May be re‐
14 stricted to specific variables and specific signatures within vari‐
15 ables. Note that EFI signature lists are numbered from zero and may
16 contain one or more entries (also numbered from zero), so 0-0 repre‐
17 sents the first entry of signature list zero.
18
19 List the contents of the UEFI signature databases
20
22 -v <var>
23 list only the contents of <var>
24
25 -s <list>[-<entry>]
26 list only a given signature list (and optionally
27
28 only a given entry in that list
29
30 -o <file>
31 output the requested signature lists to <file>
32
34 To see all the variables, type
35
36 efi-readvars
37
38 To see the second entry of signature list 1 for the db variable, do
39
40 efi-readvars -v db -s 1-1
41
42 To see all entries of signature list 0 for the KEK
43
44 efi-readvars -v KEK -s 0
45
46
47
48efi-readvar 1.9.2 December 2022 EFI-READVAR(1)