How can I test if secureboot is enabled?

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10

The mokutil command run as root will validate if secureboot is enabled or disabled with the command:

When secureboot is enabled:

# mokutil --sb-state
SecureBoot enabled

When secureboot is disabled:

# mokutil --sb-state
Failed to read SecureBoot

Note, that this does not mean that the system has not been compromised, only that trusted components have been used as part of the boot sequence.

Also this output means that secureboot is not active:

# mokutil --sb-state
SecureBoot disabled