How to do "Microsoft Windows Early Launch Anti-Malware Publisher" sign?

Question

Our comapany is a memeber of MVI, now we need to do ELAM sign like below.

Currently our sign is "Microsoft Windows Hardware Compatibility Publisher".

Could someone guide us how to get ELAM publisher sign?

Answer 1

Hi @安全 亚信

Welcome to the Microsoft Q&A Platform!

To get the Microsoft Windows Early Launch Anti-Malware (ELAM) Publisher sign:

MVI Membership: Ensure you're part of the Microsoft Virus Initiative (MVI).

Develop ELAM Driver: Create an ELAM driver that meets Microsoft’s requirements.

Submit for Certification: Package your driver and submit it through the Windows Hardware Developer Center.

Get ELAM Sign: Once certified, Microsoft will sign your driver with the ELAM publisher certificate.
For More queries you can refer this links:

https://learn.microsoft.com/en-us/windows-hardware/drivers/bringup/early-launch-anti-malware

https://learn.microsoft.com/en-us/windows-hardware/test/hlk/
If the answer is helpful, please click "Accept Answer" and kindly upvote it.

Answer 2

Hi Hima,

Our developer is checking. Now we are checking where the problem occurs.

I list the process of “sign” below. If possible, please help us check for possible problem areas.

1.We are MVI member.

2.Develop ELAM Driver: not sure about this. The driver is provided by developer. The work I am responsible for is the third step.

3.Package the driver with "Hardware Lab Kit", submit it through the Windows Hardware Developer Center.

4.Get the signed file, but "Microsoft Windows Hardware Compatibility Publisher".

Answer 3

Hi @安全 亚信
Welcome to the Microsoft Q&A Platform!
It seems you're getting a signature from "Microsoft Windows Hardware Compatibility Publisher" instead of the expected ELAM Publisher. Here’s how to troubleshoot:

MVI Membership: Confirm that your Microsoft Virus Initiative (MVI) membership is active, as it’s required for ELAM signing.

ELAM Driver Requirements: Ensure the driver meets all ELAM-specific requirements set by Microsoft.

Packaging with HLK: Check that the driver is packaged correctly with the Hardware Lab Kit (HLK), as missteps can lead to it being treated as a general driver.

Submission Process: When submitting through the Windows Hardware Developer Center, ensure you select ELAM certification, not just general hardware compatibility.

If the issue persists, review your submission details to confirm it’s intended for ELAM certification.
https://learn.microsoft.com/en-us/windows-hardware/drivers/install/elam-driver-submission
If the answer is helpful, please click "Accept Answer" and kindly upvote it.

Answer 4

Hi 安全 亚信,
Log into the Windows Hardware Developer Center:

Visit the Developer Center Dashboard and log in.

Create a New Submission:

Navigate to Submissions, then click New Submission.

Select Driver Type:

Choose the driver type. Look for ELAM. If it's missing, ensure the driver meets ELAM-specific criteria and is properly identified in metadata.

Run HLK Tests:

Run the required Hardware Lab Kit (HLK) tests, especially those for Secure Boot or Anti-Malware.

Upload the Driver Package:

Package the driver using HLK and upload it.

Review and Submit:

Ensure the certification type is set to ELAM, then submit. If the option doesn’t appear, verify the driver metadata and run the HLK tests again.
Ensure all security-related settings are enabled.
To refer for more information.
https://learn.microsoft.com/en-us/windows-hardware/drivers/install/early-launch-antimalware
If the answer is helpful, please click "Accept Answer" and kindly upvote it.