Failure to Initialize a Secure Transport Layer (TLS) During Out-of-the-Box Setup.

### The required feature described as a wish

**Description:** TLS is not enabled by default on the Management server or System VMs. This insecure default persists until explicitly remediated by the administrator.

**Affected Component:** Management UI / API, SSVM, CPVM

**Impact:** An attacker with network access can trivially intercept or sniff management traffic, including administrator credentials (password and 2FA codes), session tokens, API keys, and sensitive configuration data.

**Steps to Reproduce:**

- Deploy ACS following the official documentation.
- Navigate to http://:8080/ (no HTTPS redirect occurs).
- Attempt to connect to https://:8443/ and confirm that the connection fails.
- Capture traffic with Wireshark or `tcpdump` during a login session.
- Observe that credentials and session tokens are transmitted in cleartext.

**Recommended Remediation:** Enable TLS by default during installation. A self-signed certificate can be automatically generated and configured without any additional effort on the user's part.

Commencez par suivre la documentation officielle de déploiement de CloudStack et reproduisez l’accès HTTP sur le port 8080 ainsi que l’accès HTTPS échoué sur le port 8443. Examinez la configuration par défaut de Management UI/API, SSVM et CPVM ; le travail est considéré comme terminé lorsque TLS est activé par défaut et que le trafic de gestion n’est pas exposé en clair.

Rédigé par le modèle d'indexation à partir du texte de l'issue.