Failure to Initialize a Secure Transport Layer (TLS) During Out-of-the-Box Setup.

### The required feature described as a wish

**Description:** TLS is not enabled by default on the Management server or System VMs. This insecure default persists until explicitly remediated by the administrator.

**Affected Component:** Management UI / API, SSVM, CPVM

**Impact:** An attacker with network access can trivially intercept or sniff management traffic, including administrator credentials (password and 2FA codes), session tokens, API keys, and sensitive configuration data.

**Steps to Reproduce:**

- Deploy ACS following the official documentation.
- Navigate to http://:8080/ (no HTTPS redirect occurs).
- Attempt to connect to https://:8443/ and confirm that the connection fails.
- Capture traffic with Wireshark or `tcpdump` during a login session.
- Observe that credentials and session tokens are transmitted in cleartext.

**Recommended Remediation:** Enable TLS by default during installation. A self-signed certificate can be automatically generated and configured without any additional effort on the user's part.

Beginne damit, der offiziellen CloudStack-Bereitstellungsdokumentation zu folgen, und reproduziere den HTTP-Zugriff auf Port 8080 sowie den fehlgeschlagenen HTTPS-Zugriff auf Port 8443. Überprüfe die standardmäßige Konfiguration von Management UI/API, SSVM und CPVM; als abgeschlossen gilt die Aufgabe, wenn TLS standardmäßig aktiviert ist und der Management-Datenverkehr nicht im Klartext offengelegt wird.

Vom Indexierungsmodell aus dem Issue-Text verfasst.