Who would have thought spelling mattered..
<management>
<security-realms>
<security-realm name="ManagementRealm">
<!-- server-identities is required for the ManagementRealm to point to SSL certs keystore can be placed anywhere that makes sense -->
<server-identities>
<ssl>
<keystore path="/usr/share/jboss-as/jboss-eap-6.0/jboss.keystore" keystore-password="changeit"/>
</ssl>
</server-identities>
<authentication>
<local default-user="$local"/>
<properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/>
</authentication>
</security-realm>
And then..
<http-interface security-realm="ManagementRealm">
<!-- Small typos causes grief don't forget socket-binding http's' in this statement -->
<socket-binding https="management-https"/>
</http-interface>
</management-interfaces>
</management>
Likely won't be the last time I stare at XML looking for typos...
Next step is the tie in to LDAP.