(1) Download generator from
https://bitcoinpaperwallet.com/.
(2) Verify against PGP key on website.
(3) Transfer generator to USB.
(4) Roll dice, total of 36 rolls, write down.
(5) Run a Linux cold boot from a USB (not the same one used for the generator), plug in other USB, do not connect to internet.
(6) Create a wallet, BIP38 encrypt it with the written dice rolls, print to file, transfer to USB.
(7) Use USB to get wallet printed.
(8) Cut and fold (don't tape yet), leaving space for the encryption key.
(9) Write key on extra space.
(10) Use decrypt/verify option (from the cold boot) to decrypt the wallet and check it against the address.
(11) Tape up the wallet, it can now be used to store bitcoin.
Here is a wallet that failed step 10, no bitcoin was sent to it (image flipped horizontally):