VIRT-FW-MEASURE(1) User Commands VIRT-FW-MEASURE(1)

virt-fw-measure - manual page for virt-fw-measure 26.8.1

virt-fw-measure [options]

show this help message and exit
set loglevel to LEVEL
read edk2 image from FILE
firmware version (PcdFirmwareVersionString)
write event log in systemd-pcrlock format (default)
write expected pcr values
read edk2 vars from FILE
assume secure boot is disabled
enable shim variable measurements
disable shim variable measurements
pick tpm2 banks (sha1, sha256, sha384, sha512), specify multiple times to select more than one

Gerd Hoffmann <kraxel@redhat.com>

August 2026 virt-fw-measure 26.8.1