I think there is something about "getting the driver signed from the dashboard", seems like Microsoft will sign it if it passes WHQL certification. But it is re

I think there is something about "getting the driver signed from the dashboard", seems like Microsoft will sign it if it passes WHQL certification. But it is really hard to find any coherent information about how it all works. Seems that everything is kept obscure if you are not a big hardware company. Something as simple as getting a list of which certificates that will work seems practically impossible. The only useful information seems to be from blog posts and forum discussions at osronline. Of course malware authors don't care much about all this since they just find some old version of a driver with a known vulnerability, so the only it accomplishes is keeping a high barrier to entry.