Can provision a signing key without a license?

https://docs.conclave.net/signing.html
> Signing is also used to authorise which enclaves can start. By default Intel chips won't start an enclave unless it's signed by an Intel key, but this behaviour can be changed and on Azure (see ["Deploying to Azure"](https://docs.conclave.net/machine-setup.html)), enclaves can be self-signed. If you want to use older hardware, getting it whitelisted by Intel is free and can be done quickly. It's a similar process to getting an SSL certificate but using different tools.

I saw an article like the one above. Is there a way to run a binary signed with a self-signed key using UEFI/BIOS or Something?