/usr/bin/virt-fw-measure

Usage: virt-fw-measure [options]

Options:
  -h, --help            show this help message and exit
  -l LEVEL, --loglevel=LEVEL
                        set loglevel to LEVEL
  --image=FILE          read edk2 image from FILE
  --version=VER         firmware version (PcdFirmwareVersionString)
  --pcrlock             write event log in systemd-pcrlock format (default)
  --digests             write expected pcr values
  --vars=FILE           read edk2 vars from FILE
  --no-sb, --no-secure-boot
                        assume secure boot is disabled
  --shim                enable shim variable measurements
  --no-shim             disable shim variable measurements
  --bank=BANKS          pick tpm2 banks (sha1, sha256, sha384, sha512), specify multiple times to
                        select more than one