How would I go about replacing the Device Certificates on a BIG-IP Virtual using a Windows CA?

How would I go about replacing the Device Certificates on a BIG-IP Virtual using a Windows Server 2012R2 Certificate Authority? The F5 CSM is not recognised by the Windows CA.