authvar.1

---

AUTHVAR(1) BSD General Commands Manual AUTHVAR(1)

NAME

authvar — handles authenticated variables for pesign

SYNOPSIS

authvar ⟨

**−a **| **−c **| −s ⟩ **−N **{guid} **−n **name ⟨ **
−v ***value *| **−f file ⟩ [−t time] [−d directory] [−S nickname] [−i file] [−e **file]

DESCRIPTION

authvar is a command line utility for handling authenticated UEFI variables.

OPTIONS
−a | −−append

Append to variable

−c | −−clear

Clear variable

−s | −−set

set variable

−N ⟨
{guid} | namespace⟩ | −−namespace ⟨
{guid} | namespace⟩

Variable is in namespace or {guid} (

default: global )

Use −N help to list namespaces.

−n name | −−name name

Variable name

−v value | −−value value

Set or append value to variable

−f file | −−valuefile file

Read value from file

−t time | −−timestamp time

Timestamp for the variable (

default: now )

−d directory | −−certdir directory

Specify nss certificate database directory (

default: /etc/pki/pesign )

−S nickname | −−sign nickname

Sign variable with certificate nickname from the NSS database

−i file | −−import file

Import variable from file

−e file | −−export file

Export variable to file instead of setting it in firmware

STANDARDS
B. Kaliski

,

PKCS #7: Cryptographic Message Syntax v1.5 , *
Internet Engineering Task Force* ,
RFC 2315 ,
https://tools.ietf.org/html/rfc2315  ,
March 1998 .

K. Moriarty

,

M. Nyström ,
S. Parkinson ,
A. Rusch , and
M. Scott , *
PKCS #12: Personal Information Exchange Syntax v1.1* , *
Internet Engineering Task Force* ,
RFC 7292 ,
https://tools.ietf.org/html/rfc7292  ,
July 2014 .

PKCS11 Technical Committee

,

PKCS#11: Cryptographic Token Interface Standard , *
OASIS* ,
https://www.cryptsoft.com/pkcs11doc/  .

UEFI Specification Working Group

,

Unified Extensible Firmware Interface (UEFI) Specification Version 2.8 , *
Unified Extensible Firmware Interface Forum* ,
https://uefi.org/specifications  ,
March 2019 .

SEE ALSO

pesign(1), certutil(1)

AUTHORS

Peter Jones

Linux Jun 4, 2020$ Linux

---