Consultation about windows driver signing for public release.

There is a single executable driver that is compiled and run successfully on Windows XP - Windows 10 (latest build). I need a full step by step guide on how (and where) to buy a certificate and sign the driver to be able to successfully install it on the target platforms (XP - 10, including windows server editions and secure-boot enabled PCs). I need you to explain whether it's necessary to submit the driver to Windows Hardware Dev center, should it pass HLK test and so on.