So I can't give detailed comment. However assuming it is consistent with other TKL appliances (which I have no reason to doubt) then SSL is enabled by default and a unique (self-signed) certificate is auto-generated on firstboot (i.e. first time the appliance boots).