Windows desktop applications
Collapse the table of content
Expand the table of content
Information
The topic you requested is included in another documentation set. For convenience, it's displayed below. Choose Switch to see the topic in its original location.

UEFI Firmware Signing

UEFI signing is a service provided by the Dashboard that lets you to sign UEFI firmware binaries targeted to x86 or x64 computers, so they can be installed on Windows PCs.

To submit your firmware

  1. Sign in to the dashboard with your Microsoft account, and then click Hardware certification.

  2. On the Hardware certification page, in the Create submissions tile, click Create UEFI submission.

    Note  

    Before proceeding, you may be prompted to sign a legal agreement. To continue, review the document, add your signature, add the date, and then click Submit. Each organization only needs to sign this agreement once.

     
  3. All UEFI submissions must be in a single, signed CAB file and contain all the UEFI files for signing. The CAB file signature must match the Authenticode certificate on file for your company with dashboard. Depending on your certificate provider, you may need to use an external web portal or use signtool.

  4. On the Create UEFI page, browse to find the CAB file that you want to submit, and then click Submit.

Important  

EFI ByteCode (EBC) files must be compiled using the /ALIGN:32 flag for processing to succeed.

Submission packages should be a CAB library that contains no folders and only the *.efi files to be signed.

 

When the dashboard completes processing your submission, it sends a results email to the work email address on file.

To manage your firmware

  1. Sign in to the dashboard with your Microsoft account, and then click Hardware certification.

  2. On the Hardware certification page, in the Manage submissions tile, click Manage submissions.

  3. On the Manage submissions page, select UEFI from the Submission type list.

  4. Select the submission that you want to manage.

  5. On the Details view, you can see the status of your submission, and, if it's complete, download the signed binaries.

Related topics

Microsoft UEFI CA Signing Policy Updates:
Pre-Submission Testing for UEFI Submissions

 

 

Send comments about this topic to Microsoft

Show:
© 2016 Microsoft