Description: tools for manipulating machine owner keys This program provides the means to enroll and erase the machine owner keys (MOK) stored in the database of shim.