Break Glass
Warnings
WARNING: Break Glass disables active CMSSPM enforcement without deleting or resetting saved configuration. While this mode is enabled, settings may still appear configured in the interface, but CMSSPM protections are not enforced.
WARNING: Turn this on only long enough to regain access, review saved settings, and correct the configuration. If HTTPS redirect is preventing access, you may also need to remove wp-content/mu-plugins/cmsspm_mu_Force_https.php so HTTPS is no longer forced.
Description of the control
Use Break Glass as an emergency recovery mode when a CMSSPM enforcement setting is blocking normal access or causing an operational problem. This control keeps the saved settings visible while bypassing CMSSPM runtime enforcement until the control is turned off again.
Saving this toggle creates or updates define( 'CMSSPM_BREAKGLASS', true ); or define( 'CMSSPM_BREAKGLASS', false ); in wp-config.php. In an emergency, that line can also be added or edited manually.
Procedure
- Open Posture Management.
- Select Settings.
- Locate the Break Glass card under Sensitive Control.
- Enable Break Glass by turning the toggle on.
- Select Save Settings.
- If access to the site or admin area is still blocked by forced HTTPS, check wp-content/mu-plugins for cmsspm_mu_Force_https.php and remove that file.
- Review the saved CMSSPM settings that caused the access or enforcement problem.
- Correct the affected configuration.
- Return to the Break Glass card and turn the toggle off after recovery is complete.
- Select Save Settings again.
Validation
After saving, confirm that Break Glass shows as enabled in the card and that access has been restored enough to review and correct CMSSPM settings. If wp-config.php is accessible, confirm that the expected CMSSPM_BREAKGLASS value has been written there.
After recovery, turn Break Glass off and save again. Confirm that the toggle returns to the off state and that the corrected CMSSPM protections are enforced normally.