diff --git a/sb-setup/sb-setup b/sb-setup/sb-setup
index 10b748a..ad387f4 100755
--- a/sb-setup/sb-setup
+++ b/sb-setup/sb-setup
@@ -23,6 +23,11 @@ QUIET=
 
 [ "$QUIET" ] || echo "Secure boot setup script for openmamba"
 
+[ $UID -eq 0 ] || {
+   echo "This script must be run as root; exiting."
+   exit 1
+}
+
 [ "$SECUREBOOT_ENABLED" == "00000001" ] || {
    [ "$QUIET" ] || echo "Secure Boot is not enabled; exiting."
    exit 0