Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   14857 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

PESIGN-CLIENT(1)					      PESIGN-CLIENT(1)

NAME
       pesign-client - command line tool for signing UEFI applications

SYNOPSIS
       pesign [--in=infile | -i infile]
	      [--out=outfile | -o outfile]
	      [--export=exportfile | -e exportfile]
	      [--token=token | -t token]
	      [--certificate=nickname | -c nickname]
	      [--unlock | -u] [--kill | -k] [--sign | -s]
	      [--pinfd=pinfd | -f pinfd]
	      [--pinfile=pinfile | -F pinfile]

DESCRIPTION
       pesign  is  a command line tool for manipulating signatures and crypto‐
       graphic digests of UEFI applications.

OPTIONS
       --unlock
	      Unlock the specified  token.   A	PIN  -	specified  by  one  of
	      --pinfd,	  --pinfile,	or    the    environmental    variable
	      PESIGN_TOKEN_PIN - is required for this  operation  to  succeed.
	      The  PIN may be empty, if that is what is required for the token
	      specified with --token.

       --pinfd=pinfd
	      When using --unlock, read the token's PIN	 from  the  open  file
	      descriptor pinfd.

       --pinfile=pinfile
	      When using --unlock, read the token's PIN from the file pinfile.

       --sign
	      Sign the binary specified by infile.

       --detached
	      When used with --sign, write the signature to outfile.

       --in=infile
	      When used with --sign, specify the input binary.

       --out=outfile
	      When  used  with	--sign, specify output file.  If --detached is
	      specified, this will be a DER-formatted  signature.   Otherwise,
	      the output will be the signed PE binary.

       --token=token
	      When used with --unlock or --sign, use the specified NSS token's
	      certificate database.

       --certificate=nickname
	      When used with --sign, use the certificate database  entry  with
	      the specified nickname for signing.

       --kill
	      Terminate the signing server.

SEE ALSO
       pesign(1)

AUTHORS
       Peter Jones

				Mon Oct 15 2012		      PESIGN-CLIENT(1)

Vote for polarhome