From 8a30d067745b07146768fd4e1e428cdf98c6407c Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Sun, 11 Oct 2026 20:28:03 +0200
Subject: T861: secure-boot: document show secure-boot op-mode commands

Add an Operation section with {opcmd} entries for 'show secure-boot' and 'show
secure-boot detail', and reference it from the installation verification step.
---
 docs/installation/secure-boot.md | 36 +++++++++++++++++++++++++++++-------
 1 file changed, 29 insertions(+), 7 deletions(-)

(limited to 'docs')

diff --git a/docs/installation/secure-boot.md b/docs/installation/secure-boot.md
index ecbc432d..3cadd4f5 100644
--- a/docs/installation/secure-boot.md
+++ b/docs/installation/secure-boot.md
@@ -95,13 +95,9 @@ Now reboot and re-enable UEFI Secure Boot.
 :alt: Disable UEFI secure boot
 :::
 
-VyOS will now launch in UEFI Secure Boot mode. You can verify this by running
-one of the following commands:
-
-```none
-vyos@vyos:~$ show secure-boot
-SecureBoot enabled
-```
+VyOS will now launch in UEFI Secure Boot mode. You can verify this with
+{opcmd}`show secure-boot` (see [Operation](#secure-boot-operation)) or by
+running one of the following commands:
 
 ```none
 vyos@vyos:~$ show log kernel | match Secure
@@ -179,6 +175,32 @@ service`
 This prevents loading any malicious code after the image is assembled into the
 Kernel as a module. You can disable this behavior on custom builds if needed.
 
+(secure-boot-operation)=
+
+## Operation
+
+```{opcmd} show secure-boot
+
+Show whether the system was booted with UEFI Secure Boot enabled.
+
+:::{code-block} none
+vyos@vyos:~$ show secure-boot
+SecureBoot enabled
+:::
+```
+
+```{opcmd} show secure-boot detail
+
+Show the issuer and subject of the certificate used to sign the running
+Linux Kernel.
+
+:::{code-block} none
+vyos@vyos:~$ show secure-boot detail
+Issuer:  /CN=VyOS Networks Secure Boot CA
+Subject: /CN=VyOS Networks Secure Boot Signer 2025 - linux
+:::
+```
+
 ## Troubleshoot
 
 In most cases, if something goes wrong during system boot, you'll see this
-- 
cgit v1.2.3


From 2277fc507fa87d3c1ade5b477c7c139dc3e970c0 Mon Sep 17 00:00:00 2001
From: Daniil Baturin <daniil@vyos.io>
Date: Tue, 13 Oct 2026 13:54:37 +0100
Subject: Apply formatting suggestion from @github-actions[bot]

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 docs/installation/secure-boot.md | 1 -
 1 file changed, 1 deletion(-)

(limited to 'docs')

diff --git a/docs/installation/secure-boot.md b/docs/installation/secure-boot.md
index 3cadd4f5..538153ff 100644
--- a/docs/installation/secure-boot.md
+++ b/docs/installation/secure-boot.md
@@ -199,7 +199,6 @@ vyos@vyos:~$ show secure-boot detail
 Issuer:  /CN=VyOS Networks Secure Boot CA
 Subject: /CN=VyOS Networks Secure Boot Signer 2025 - linux
 :::
-```
 
 ## Troubleshoot
 
-- 
cgit v1.2.3