If you’re caught up, you can earn them from either doing a full clear or by killing N’Zoth on normal or higher, but you can only earn one a week. If you’re behind, you can earn one from both sources each week until you’re caught up.
It has to be normal or higher. LFR won’t drop it.
Here’s Blizz’s post about it.