Configured SSL with:

<server-identities>
<ssl>
<keystore path="/path/to/server/eap6/ga/keystore/server.jks" keystore-password="password" alias="tomcat" />
</ssl>
</server-identities>

Added https="management-https" to the socket-binding for HTTP.

Built keystore with:
keytool -genkey -alias tomcat -keyalg RSA -keystore server_new.jks -storepass password

Went to:
https://localhost:9443/console/App.html

The page loaded and presented a login dialog. Invalid credentials resulted in a dialog reappearing (as expected).

Valid credentials resulted in the following error:

"The web console could not be loaded.

Unexpected HTTP response: 403 Request { "operation" => "read-attribute", "name" => "process-type", "address" => [] } Response Forbidden No detail"