mokutil

Configure Secure Boot Machine Owner Keys (MOK). Some operations, such as enabling and disabling Secure Boot or enrolling keys require a reboot. More information: <https://github.com/lcp/mokutil>.

Install

All systems
curl cmd.cat/mokutil.sh
Debian Debian
apt-get install mokutil
Ubuntu
apt-get install mokutil
image/svg+xml Kali Linux
apt-get install mokutil
CentOS
yum install mokutil
Fedora
dnf install mokutil
Windows (WSL2)
sudo apt-get update sudo apt-get install mokutil

Configure Secure Boot Machine Owner Keys (MOK). Some operations, such as enabling and disabling Secure Boot or enrolling keys require a reboot. More information: <https://github.com/lcp/mokutil>.

  • Show if Secure Boot is enabled:
    mokutil --sb-state
  • Enable Secure Boot:
    mokutil --enable-validation
  • Disable Secure Boot:
    mokutil --disable-validation
  • List enrolled keys:
    mokutil --list-enrolled
  • Enroll a new key:
    mokutil --import path/to/key.der
  • List the keys to be enrolled:
    mokutil --list-new
  • Set shim verbosity:
    mokutil --set-verbosity true

© tl;dr; authors and contributors