To sign the UEFI image file with sbsigntools, just use the following command: $ sbsign --key UserName.key --cert UserName.crt --output sample-signed.efi sample.efi Verify the signed file To verify the signature with the CA certificate: $ sbverify --cert ca.crt sample-signed.efi Signature verification OK