MAEFICAPSULE(1)

NAME
mkeficapsule - Generate EFI capsule file for U-Boot

SYNOPSIS
mkeficapsule [options] [image-blob] capsule-file

DESCRIPTION
mkeficapsule command is used to create an EFI capsule file for use with the U-Boot EFI capsule update. A capsule file may contain various type of firmware blobs which are to be applied to the system and must be placed in the specific directory on the UEFI system partition. An update will be automatically executed at next reboot. Optionally, a capsule file can be signed with a given private key. In this case, the update will be authenticated by verifying the signature before applying. Additionally, an empty capsule file can be generated for acceptance or rejection of firmware images by a governing component like an Operating System. The empty capsules do not require an image-blob input file. mkeficapsule takes any type of image files when generating non empty capsules, including:

raw image
    format is a single binary blob of any type of firmware.

FIT (Flattened Image Tree) image
    format is the same as used in the new uImage format and allows for multiple binary blobs in a single capsule file. This type of image file can be generated by mkimage.

OPTIONS

-g, --guid guid-string
    Specify guid for image blob type. The format is:
        xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx The first three elements are in little endian, while the rest is in big endian. The option must be specified for all non empty and image acceptance capsules

-i, --index index
    Specify an image index

-I, --instance instance
    Specify a hardware instance

For generation of firmware accept empty capsule --guid is mandatory

-A, --fw-accept
    Generate a firmware acceptance empty capsule

-R, --fw-revert
    Generate a firmware revert empty capsule

-o, --capoemflag
    Capsule OEM flag, value between 0x0000 to 0xffff

-h, --help
    Print a help message

With signing, --private-key, --certificate and --monotonic-count are all mandatory.

-p, --private-key private-key-file
    Specify signer's private key file in PEM

-c, --certificate certificate-file
    Specify signer's certificate file in EFI certificate list format

-m, --monotonic-count count
    Specify a monotonic count which is set to be monotonically incremented at every firmware update.

-d, --dump_sig
    Dump signature data into *.p7 file

FILES

/EFI/UpdateCapsule
    The directory in which all capsule files be placed

SEE ALSO
mkimage(1)

AUTHORS
Written by AKASHI Takahiro <takahiro.akashi@linaro.org>

HOMEPAGE
http://www.denx.de/wiki/U-Boot/WebHome