GRUB-PROTECT(1) GRUB-PROTECT(1) grub-protect - grub-protect [...] grub-protect . GRUB . -a --action=add|remove . -p --protector=tpm2 (tpm2 ). --tpm2-asymmetric=TYPE SRK: RSA (RSA2048) ECC (ECC_NIST_P256).(: ECC) --tpm2-bank=ALG PCR : SHA1 SHA256 SHA384 SHA512. (: SHA256) --tpm2-device= TPM2. (: /dev/tpm0) --tpm2-evict SRK TPM . --tpm2-keyfile= . --tpm2-nvindex= NV. --tpm2-outfile= ( GRUB ). --tpm2-pcrs=0[1]... PCR '7,11'. PCR 0~7 ( ) (OVMF/SLOF) . . (: 7) --tpm2-srk= SRK SRK . --tpm2key TPM 2.0. -? --help --usage -V --version . . grub-protect Texinfo. info grub-protect info grub-protect . 3 . . : . GRUB 2:2.14-1 2026 GRUB-PROTECT(1)