mokutil
Configure Secure Boot Machine Owner Keys (MOK).
TLDR
Show if Secure Boot is enabled
$ mokutil --sb-state
Enable Secure Boot
$ mokutil --enable-validation
Disable Secure Boot
$ mokutil --disable-validation
List enrolled keys
$ mokutil --list-enrolled
Enroll a new key
$ mokutil --import [path/to/key.der]
List the keys to be enrolled
$ mokutil --list-new
Set shim verbosity
$ mokutil --set-verbosity true
