hash-to-efi-sig-list - Man Page

hash-to-efi-sig-list efi-binary [efi-binary ...] efi-signature-list

Produce an EFI Signature List file containing the sha256 hash of the passed in EFI binary

none

To create a hash efi-signature-list in the file hash.esl from the binary HelloWorld.efi do

hash-efi-sig-list HelloWorld.efi hash.esl

This hash file can now be placed directly (or as an update) into the db variables with UpdateVar

sign-efi-sig-list(1) for details on how to produce authenticated update files for the db variable.