Automating kernel driver signing

Question

I am looking at being able to automate the signing of our kernel drivers on our build server with a pipeline or similar thing. Is this possible or does it have to be a manual process?

Answer 1

Hello, from the way Microsoft implemented it, it seems like a very challenging task.

people from the project kvm-guest-drivers-windows have managed to partly automate this process.

the difficult part is to run the test required by Microsoft and waiting for the driver to be signed.

In the future, they will upload automation scripts to this repo: attestation_signing

You can also try to contact them, and offer them help to solve this problem.