Hello, from the way Microsoft implemented it, it seems like a very challenging task.
people from the project kvm-guest-drivers-windows have managed to partly automate this process.
the difficult part is to run the test required by Microsoft and waiting for the driver to be signed.
In the future, they will upload automation scripts to this repo: attestation_signing
You can also try to contact them, and offer them help to solve this problem.