A setup wizard is the initial configuration flow that creates or reconfigures a server’s administrative settings. It usually asks for items such as the admin account, network access, storage locations, and feature defaults. In a well-designed product, the wizard should only be available during first-time setup or after an authenticated reset, not as a public shortcut into administration.
In cyber security, setup wizards matter because they sit at the boundary between an untrusted install and a trusted server. If the wizard can be rerun on a live system without proper checks, an attacker may gain control by resetting settings, creating a new admin account, or changing security-critical options. Defenders harden this flow by locking it after deployment, requiring authentication for reconfiguration, and auditing any code that exposes setup pages or bootstrap APIs.