change keys in a ..._VARS.fd file programmatically (SecureBoot enabled)

[Dmitry Mityugov <dmitry.mityugov@gmail.com>]

Hi,

Could you please let me know if it possible to automate changing keys in a
..._VARS.fd when SecureBoot is enabled? I understand that I can go into the
UEFI shell and change them there manually, but I'm looking for a way to
add/replace/delete them from my program before a KVM VM is started.

I've found an email in this list with a similar question,
https://lists.01.org/pipermail/edk2-devel/2017-August/012995.html , but I'm
not sure if the answer is still valid, or if any new possibilities have
arosen since then.

There are also some home-made editors for the vars, like
http://git.annexia.org/?p=virt-efivars.git;a=summary . Should I go this way
in my adventure?

Thank you in advance for any insight on this subject

-- 
Dmitry