I used a mixture of the MMC, with the various Certificate Services snap-ins, and also the CertReq.exe tool. One thing to note, is that not all Windows cerificate types are enabled by default and that you can't (by default) create certificates saying whatever you fancy - you may have to relax some of its safeguards first.

Try this link: https://www.sslplus.eu/wiki-en/Generating_a_CSR_in_MS_Windows_(using_certreq) ... it might get you started.
(It starts with generating the 'signing request'. You can follow its instructions, or cut-and-paste the one that's currently sat in your 2830).