diff --git a/rust/lanzatool/src/cli.rs b/rust/lanzatool/src/cli.rs
index 69d0929..20490ec 100644
--- a/rust/lanzatool/src/cli.rs
+++ b/rust/lanzatool/src/cli.rs
@@ -70,6 +70,7 @@ fn install(
 ) -> Result<()> {
     let lanzaboote_stub = std::env::var("LANZABOOTE_STUB")?;
     let initrd_stub = std::env::var("LANZABOOTE_INITRD_STUB")?;
+    let sbsigntool = std::env::var("SBSIGNTOOL")?;
 
     install::install(
         public_key,
@@ -77,7 +78,8 @@ fn install(
         pki_bundle,
         auto_enroll,
         bootspec,
+        Path::new(&sbsigntool),
         Path::new(&lanzaboote_stub),
-        Path::new(&initrd_stub),
+        Path::new(&initrd_stub)
     )
 }
diff --git a/rust/lanzatool/src/install.rs b/rust/lanzatool/src/install.rs
index 6d28ed0..30e0fe8 100644
--- a/rust/lanzatool/src/install.rs
+++ b/rust/lanzatool/src/install.rs
@@ -15,6 +15,7 @@ pub fn install(
     _pki_bundle: Option<PathBuf>,
     _auto_enroll: bool,
     bootspec: &Path,
+    sbsigntool: &Path,
     lanzaboote_stub: &Path,
     initrd_stub: &Path,
 ) -> Result<()> {