Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk10 min

Arma 3 Server Config Generator: Build server.cfg Step by Step

Create and secure an Arma 3 dedicated-server configuration with exact server.cfg examples, launch commands, mission settings, security defaults and validation steps.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To create an Arma 3 dedicated-server configuration, write a plain-text file containing the server identity, access rules, player limit, mission cycle and security policy, then start the server with -config=server.cfg. The filename is conventional rather than mandatory: Arma 3 loads whichever file you specify after -config. A separate network file, commonly called basic.cfg, is selected with -cfg.

This guide builds a working configuration from an empty directory, explains what the important lines do, shows how to launch and validate it, and covers the security settings that control passwords, signatures, BattlEye and file patching.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What server.cfg controls

Bohemia’s server configuration format controls multiplayer behavior such as the displayed server name, passwords, player capacity, voting, welcome messages, difficulty and mission rotation. It is not the same file as the basic network configuration. The dedicated-server command line chooses the files:

  • -config=filename loads the multiplayer server configuration. If you omit -config, no server configuration file is loaded.
  • -cfg=filename loads the separate basic network configuration.

The file can be named server.cfg, public-altis.conf or anything else. Using server.cfg is sensible because administrators and control panels recognize it, but Arma 3 does not assign special meaning to that name.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Before you write the file

Install the dedicated server

Install the Arma 3 Server tool from Steam’s Tools library or deploy it with SteamCMD. Keep the server in its own directory rather than mixing it with a desktop client installation. Use the 64-bit dedicated-server executable where it is available; on Windows this is generally arma3server_x64.exe, while Linux installations use the corresponding 64-bit server binary.

Decide the values you must know

  • A public name for hostname.
  • Whether players need a join password.
  • A long, unique administrator password for passwordAdmin.
  • The maximum number of players and the mission templates you installed.
  • The UDP/TCP ports selected by your startup and network configuration, so the same values can be opened on the firewall and forwarded through NAT.
  • Whether the server is vanilla, modded, private, or publicly listed. That choice affects signature and file-patching policy.

Build server.cfg step by step

1. Create a plain-text file

In the dedicated-server directory, create a file named server.cfg. Use a plain-text editor and save it as UTF-8 or another ordinary text encoding supported by your host. Do not save it as a rich-text document or accidentally append .txt, which would leave you with server.cfg.txt.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Set identity and access

These lines give the instance a recognizable identity and establish who may join or administer it:

hostname = "My Arma 3 Server";
password = "";
passwordAdmin = "REPLACE_WITH_A_LONG_UNIQUE_SECRET";
// serverCommandPassword = "ANOTHER_UNIQUE_SECRET";
// admins[] = {"76561198000000000"};

hostname is the name shown in the server browser. An empty password makes the join password optional; replace it with a value when access should be restricted. passwordAdmin is used with the in-game #login command. Do not reuse it for operating-system accounts or other services.

serverCommandPassword is an optional separate password for server-command access. The admins[] array can contain player UIDs authorized to use #login without sharing the administrator password. Copy UIDs exactly and review them whenever staff changes.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

3. Set capacity and persistence

maxPlayers = 20;
persistent = 1;

maxPlayers sets the server’s configured ceiling, but the effective capacity cannot exceed the number of playable slots in the mission currently loaded. A mission with fewer slots will therefore show fewer available places even when the configuration allows more.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Set persistent = 1 when missions must continue after players leave or when you start the server with -autoInit. The startup-parameter documentation specifies that Persistent = 1; is required for -autoInit; otherwise that startup option is skipped.

4. Add welcome text and logging

motd[] = {"Welcome to the server", "Read the rules before deploying"};
motdInterval = 5;
logFile = "server_console.log";

motd[] accepts one or more welcome lines. motdInterval controls the delay between those lines. logFile writes the text console output to a file, giving you a record of startup messages, mission changes and many configuration errors. Use a path writable by the service account and include the log in your backup or rotation plan.

5. Define the mission cycle

A mission class tells the server what content to load. The template must match an installed mission and map name exactly:

class Missions {
    class Mission1 {
        template = "MyMission.Altis";
        difficulty = "Regular";
        class Params {};
    };
    class Mission2 {
        template = "AnotherMission.Stratis";
        difficulty = "Veteran";
        class Params {};
    };
};

template uses the mission name followed by a period and the terrain name, such as MyMission.Altis. A spelling, capitalization or map mismatch can prevent a mission from loading. Add class Params {} when the mission has no custom parameters; mission-specific parameters can be added inside that class when the mission documentation provides their names and values.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Use missionWhitelist[] only when you want to restrict which missions can be selected. A whitelist that omits the mission your community expects will make that mission unavailable, so check every entry against the installed files.

6. Apply a deliberate security baseline

BattlEye = 1;
verifySignatures = 2;
allowedFilePatching = 0;
  • BattlEye = 1 enables BattlEye.
  • verifySignatures = 2 enables signature verification for client content. This is the normal starting point for a public modded server; clients must use content whose signatures the server accepts.
  • allowedFilePatching = 0 is the restrictive baseline. It prevents client file patching unless you intentionally relax the policy for a controlled development workflow.

Review the extension allowlists before enabling unusual missions or scripts:

allowedLoadFileExtensions[] = {};
allowedPreprocessFileExtensions[] = {};
allowedHTMLLoadExtensions[] = {};

These arrays govern which file types scripts may load, preprocess or access through HTML-related functions. The safest policy is to allow only extensions required by the missions and mods you actually run. A restrictive list can break a legitimate mission; an unnecessarily broad list expands the server’s attack surface. Change one list at a time and test the affected mission.

Minimal working starter configuration

The following file is a deliberately small baseline. Replace the secrets and mission template before use:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
hostname = "My Arma 3 Server";
password = "";
passwordAdmin = "REPLACE_WITH_A_LONG_UNIQUE_SECRET";
maxPlayers = 20;
persistent = 1;
motd[] = {"Welcome to the server"};
motdInterval = 5;
logFile = "server_console.log";
BattlEye = 1;
verifySignatures = 2;
allowedFilePatching = 0;

class Missions {
    class Mission1 {
        template = "MyMission.Altis";
        difficulty = "Regular";
        class Params {};
    };
};

This covers the functional core: identity, administration, capacity, persistence, a mission and basic security. Voting, difficulty details, extension allowlists and additional mission parameters can be added after this version starts cleanly.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Start the server with the correct files

Open a terminal in the dedicated-server directory and pass the configuration explicitly:

arma3server_x64 -config=server.cfg -cfg=basic.cfg

On Windows, use the executable’s full name and path if the working directory is different. On Linux, use the installed binary and ensure the service account can read the configuration and write the log. The important distinction is that -config points to the multiplayer settings above, while -cfg points to the separate basic network file. Passing only -cfg will not load server.cfg.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If you use -autoInit, keep persistent = 1 in the server configuration. Without it, the startup parameter is skipped. Keep startup parameters in the service, batch file or container definition rather than duplicating them in the configuration file.

Ports, NAT and firewall access

An Internet server also needs network reachability. The official reference warns that hosts behind NAT or a firewall must forward and open the game port and the required Steam ports. Exact port numbers depend on the startup and network configuration you selected, so do not copy a universal number from another installation. Record the ports your instance actually binds, permit them through the host firewall, and forward those same ports to the server’s private address.

  1. Identify the ports in the startup configuration and the basic network settings.
  2. Create inbound firewall rules for those ports and protocols on the host.
  3. Forward the same ports from the router to the dedicated-server machine when the host is behind NAT.
  4. Restart the instance and verify that it appears in the browser from a network outside your LAN.
  5. If the browser listing works but direct connections fail, compare the forwarded destination address, protocol and server bind settings rather than changing unrelated server.cfg values.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Validate the configuration in layers

Test from the simplest failure to the most specific. This separates a malformed file from a network or mod problem.

  1. Process startup: launch the server and inspect the console and logFile for configuration-parse errors. A process that exits immediately usually has a syntax, path or permission problem.
  2. Browser identity: confirm that the expected hostname and player limit appear. If the old name remains, the process may be loading a different file or a different instance.
  3. Administration: join as an operator and test #login, or confirm that a UID listed in admins[] receives the intended authorization.
  4. Access control: test the join password from a client that does not have cached credentials, then test the no-password behavior if the server is intended to be public.
  5. Mission cycle: load each MissionN entry. A failure usually means the template is not installed, the map suffix is wrong, or a required mod is missing.
  6. Mod and signature policy: test with exactly the mod set your community will use. Confirm that signed content joins successfully and that an unsigned or disallowed client is rejected under your selected verification policy.
  7. Reconnect and persistence: leave and rejoin, then observe whether the mission continues as intended. This is particularly important when using -autoInit.

Common failures and precise fixes

The server ignores server.cfg

Check the launch command first. The file is loaded only when named after -config; omitting that parameter means no server configuration is loaded. Also verify the working directory, spelling and file extension. If you use a custom filename, pass that exact filename rather than assuming the conventional name is discovered automatically.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The server starts but the mission never loads

Compare every template with the installed mission and terrain names. Remove extra spaces or punctuation, confirm required mods are present, and test one mission entry at a time. A valid configuration cannot make unavailable workshop or local content appear on the server.

Players cannot connect from the Internet

Check host firewall rules, router forwarding and the private address receiving the forwarded traffic. Make sure the forwarded values match the ports actually selected for this instance. A server visible on the same LAN does not prove that NAT forwarding is correct.

Legitimate mod users are rejected

With verifySignatures = 2, the server checks signatures. Confirm that every client has the same mod version and that the server has the corresponding keys. Do not disable signature verification merely to hide a missing key; correct the deployment or make an explicit, documented security decision.

A mission breaks after tightening extension lists

Review allowedLoadFileExtensions[], allowedPreprocessFileExtensions[] and allowedHTMLLoadExtensions[]. Determine which operation the mission needs, add only the required extension, restart and retest. Keep a record of each exception so a later update does not silently broaden the policy.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Important parameters at a glance

Parameter Purpose Practical guidance
hostname Name shown to players Use a stable name that identifies the community or instance.
password Optional join password Use an empty value for an open server; set a value for private access.
passwordAdmin Password for #login Use a long, unique secret and do not publish it.
serverCommandPassword Optional server-command authentication Keep it separate from passwordAdmin when enabled.
admins[] UID-based administrator authorization List only trusted UIDs and remove former operators.
maxPlayers Configured player ceiling Actual mission slots can impose a lower limit.
persistent Mission persistence Set to 1 when using -autoInit or when missions must continue after departures.
motd[], motdInterval Welcome lines and their timing Keep rules concise and verify the interval is readable.
logFile Text console log Choose a writable path and rotate or archive logs.
class Missions Mission rotation Every template must match installed content.
missionWhitelist[] Restricts selectable missions Use only when you need to limit the mission pool.
BattlEye Anti-cheat service switch 1 enables BattlEye.
verifySignatures Client signature checks 2 enables signature verification.
allowedFilePatching Client file-patching policy 0 is the restrictive baseline.
allowed*Extensions[] Script and HTML file-type allowlists Permit only extensions required by deployed content.

Hand-written file, web generator or management GUI?

A generator can save time, but it does not remove the need to understand the resulting file. A current XGamingServer generator advertises seven tabs—identity, players, voting, security, behaviour, mission cycle and advanced—and presets for secure public, private, modded-co-op and headless-client servers. Treat its export as a draft and compare it with the official parameter reference after game updates.

The open-source Arma-Server-Web-Gui is an optional management layer for Windows and Linux. It advertises start and stop controls, console and player views, editing for server.cfg and basic.cfg, difficulty and mission management, mod installation, launcher-preset import and SteamCMD integration. Version-check it before production use, especially when running several instances.

Approach Strengths Trade-offs
Hand-written configuration Transparent output, no extra service, easy to audit and version-control More manual syntax and mission-management work
Web generator Fast form-based setup and reusable presets Generated defaults may lag behind the current game; output still requires review
Management GUI Convenient restarts, logs, player views, mod workflows and multi-instance administration Adds software to maintain and must be checked for compatibility with the server version

For a single instance, a hand-written file is usually the clearest starting point. For a community operating multiple instances, a GUI can reduce repetitive administration. In either case, keep the exported configuration under version control and record which startup parameters, mods and ports belong to each instance.

Updating without losing control

  • Back up server.cfg, basic.cfg, startup scripts, mission files and signing keys before updating the server.
  • Read the current parameter reference after an Arma 3 or dedicated-server update; defaults and accepted options can change.
  • Update the server and its mods in a staging directory first when the community depends on a fixed mission cycle.
  • Recheck signature keys and extension allowlists whenever a mod or mission is replaced.
  • After every change, repeat startup, browser, administrator, mission, password and mod-policy tests.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.