kheeper secureboot
Manage an org's Secure Boot keys for sealed releases
Flags
| Flag | Description | Default |
|---|---|---|
--context |
Config context to use | default |
Commands
kheeper secureboot init
Create the org's PK, KEK and db keys and register their certificates
kheeper secureboot init <org>
Flags:
| Flag | Description | Default |
|---|---|---|
--force |
Replace keys the org already has. Hosts enrolled with the old ones will not boot new releases. |
Arguments:
org
kheeper secureboot show
Show the org's Secure Boot certificates
kheeper secureboot show <org>
Arguments:
org
kheeper secureboot add-db
Add a certificate to the org's db, signed with its KEK
kheeper secureboot add-db <org> --cert <cert.pem>
Flags:
| Flag | Description | Default |
|---|---|---|
--cert |
PEM certificate to add |
Arguments:
org