mokutil

• Manipulates EFI variables specifically relating to Secure Boot and shim
• mokutil --db
• mokutil --kek
• mokutil --sb-state
• mokutil --list-sbat-revocations
• mokutil --import
• mokutil --set-verbosity
• etc...