Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   29550 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

MOKUTIL(1)							    MOKUTIL(1)

NAME
       mokutil - utility to manipulate machine owner keys

SYNOPSIS
       mokutil [--list-enrolled]
       mokutil [--list-new]
       mokutil [--list-delete]
       mokutil [--import keylist| -i keylist]
	       ([--hash-file hashfile | -f hashfile] | [--root-pw | -P] |
		[--simple-hash | -s])
       mokutil [--delete keylist | -d keylist]
	       ([--hash-file hashfile | -f hashfile] | [--root-pw | -P] |
		[--simple-hash | -s])
       mokutil [--revoke-import]
       mokutil [--revoke-delete]
       mokutil [--export | -x]
       mokutil [--password | -p]
	       ([--hash-file hashfile | -f hashfile] | [--root-pw | -P] |
		[--simple-hash | -s])
       mokutil [--clear-password | -c]
	       ([--simple-hash | -s])
       mokutil [--disable-validation]
       mokutil [--enable-validation]
       mokutil [--sb-state]
       mokutil [--test-key | -t] ...
       mokutil [--reset]
	       ([--hash-file hashfile | -f hashfile] | [--root-pw | -P] |
		[--simple-hash | -s])
       mokutil [--generate-hash=password | -gpassword]

DESCRIPTION
       mokutil	is  a  tool  to import or delete the machines owner keys (MOK)
       stored in the database of shim.

OPTIONS
       --list-enrolled
	      List the keys the already stored in the database

       --list-new
	      List the keys to be enrolled

       --list-delete
	      List the keys to be deleted

       --import
	      Collect the followed files and form a request to shim. The files
	      must be in DER format.

       --revoke-import
	      Revoke the current import request (MokNew)

       --revoke-delete
	      Revoke the current delete request (MokDel)

       --export
	      Export the keys stored in MokListRT

       --password
	      Setup the password for MokManager (MokPW)

       --clear-password
	      Clear the password for MokManager (MokPW)

       --disable-validation
	      Disable the validation process in shim

       --enrolled-validation
	      Enable the validation process in shim

       --sb-state
	      Show SecureBoot State

       --test-key
	      Test if the key is enrolled or not

       --reset
	      Reset MOK list

       --generate-hash
	      Generate the password hash

       --hash-file
	      Use the password hash from a specific file

       --root-pw
	      Use the root password hash from /etc/shadow

       --simple-hash
	      Use the old SHA256 password hash method to hash the password
	      Note: --root-pw invalidates --simple-hash

				Thu Jul 25 2013			    MOKUTIL(1)

Vote for polarhome