To enable RCON on a DayZ server, edit the active BattlEye configuration file, add a unique RConPassword and an unused RConPort, restart the server, and allow inbound UDP traffic on that port. Connect with a BattlEye-compatible RCON client using the server’s public IP or hostname, the same UDP port, and the RCON password.
Playing with friends? Godlike.Host runs hosted DayZ servers from 10 data-center locations, with free DDoS protection.
The most common failures come from editing the wrong BattlEye directory, using the in-game administrator password instead of the RCON password, opening TCP instead of UDP, or selecting a port already used by DayZ.
As an Amazon Associate I earn from qualifying purchases.
What DayZ RCON does
RCON (remote console) lets you administer a running DayZ server from an external tool instead of typing commands in the host console. BattlEye supplies the protocol and command handling; the RCON client is only the interface used to send authenticated commands.
With RCON configured, an administrator can inspect connected players, review admins and bans, remove or add bans, kick players, broadcast messages, and load or save the ban list. RCON does not replace the DayZ server configuration file and it does not use the same password as the in-game administrator login.
#1 Best Overall
- Use any means necessary to survive a hostile open world for as long as possible.
- explore the authentic open world of chernarus, featuring 230 square kilometres of hand-crafted terrain based on real-life locations.
- become immersed in a tense, emotional experience driven by the emergent interactions of 60 players on a single server, each one fighting for survival.
- experience a wide variety of complex survival mechanics, from hunting and crafting, through to sophisticated injury simulation and transferable diseases.
- survive against environmental dangers, including the infected, dynamic weather, and animal predators
What you need before starting
- Administrative access to the machine or hosting panel that runs the DayZ server.
- The server’s active BattlEye working directory.
- A BattlEye-compatible RCON client or a hosted administration dashboard.
- A free UDP port that is not used by the DayZ game server or any other service.
- Permission to change the host firewall, cloud security group, and any upstream firewall or router.
Find the active BattlEye directory
DayZ can store BattlEye files in different locations. Do not assume that the first BEServer_x64.cfg you find is the one the running instance reads.
Bohemia Interactive documents BEServer_x64.cfg beside BEServer_x64.dll. The server startup options -bePath and -profiles can redirect BattlEye or profile data, so inspect the launch command, service definition, startup script, or hosting-panel settings first.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Windows servers
Look for a directory containing both BEServer_x64.dll and the configuration file named exactly BEServer_x64.cfg. Windows normally ignores letter case, but keeping the documented capitalization avoids confusion when files are copied or managed through a panel.
Linux servers
Linux installations commonly use the lowercase filename beserver_x64.cfg in documentation and server packages. Linux is case-sensitive, so use the exact spelling already used by the BattlEye files in the active directory. A file with a different case can be ignored even when it appears to have the right name.
When multiple copies exist
- Read the server’s launch arguments and note any
-bePathand-profilesvalues. - Inspect those directories for the BattlEye DLL and configuration file.
- Check the modification time after saving a test change, then restart the server and confirm that the running instance is using that location.
- Do not edit a template, backup, or inactive installation unless the host’s startup configuration points to it.
Create the BattlEye RCON configuration
Open the active BattlEye configuration file with an account that can save changes. Add the two required settings:
RConPassword A-long-unique-password
RConPort 2305RConPassword is the credential external RCON tools present to BattlEye. RConPort is the UDP port on which BattlEye accepts RCON connections. BattlEye marks both settings as required, and its documentation specifies that the RCON port must be different from the DayZ game server’s port or ports.
Recommended Free Tools
Choose a strong password
Use a password created specifically for RCON, not a player password or the server owner’s usual login. BattleMetrics reports a maximum length of 32 characters for DayZ and ArmA RCON passwords. Staying at or below that limit avoids clients or providers rejecting a longer value. Store the password in the client or hosting dashboard’s protected credential field rather than posting it in chat, startup scripts shared with other users, or screenshots.
Choose a free port
The example port 2305 is not a universal requirement; it is simply a valid example. Check every game-server port, query port, mod-management port, and other service on the host before selecting a value. A port collision can make RCON appear offline or prevent another service from starting.
Rank #3
- 🎮 Collector's Item: Allows for CO/VS functionality for co-op action (cable included). CO/VS multiplayer technology allows two Pocket Players to be linked together for cooperative gameplay using the included CO/VS cable
- 🎁 Konami Licensed Collectible: Includes arcade version of Contra and Super Contra
- High Resolution: This pocket-sized game features a high-resolution 2.8-inch full-color vertical display.
- Powered by either 4 AA batteries or by any micro USB cable (not included)
- 🎵 Built-in front facing speaker, volume control, and 3.5 mm headphone jack.
Leave RConIP unset in the normal case
RConIP is optional. For a server with one normal public interface, omit the line unless you have a specific reason to bind RCON to an interface. If you do set it, BattlEye and BattleMetrics require an address that remote clients can actually reach. A private RFC1918 address such as 192.168.x.x or 10.x.x.x, or a loopback address such as 127.0.0.1, will not work for an Internet-connected client.
Open the network path
RCON uses UDP, not TCP. The selected port must be allowed at every layer between the client and the DayZ host.
| Layer | Required action | Typical mistake |
|---|---|---|
| Host operating-system firewall | Create an inbound rule for the configured UDP RCON port. | Opening TCP only, or opening a different port than the file specifies. |
| Cloud security group or provider firewall | Permit inbound UDP from the administrator’s approved source addresses, or from the Internet only when no narrower policy is possible. | Changing the local firewall while the provider firewall still drops the packet. |
| Upstream firewall or router | Forward or permit the same UDP port to the DayZ host when the server is behind another gateway. | Forwarding to an old private IP after the host address changed. |
| RCON client | Use the server’s public IP or DNS hostname, the configured UDP port, and the exact password. | Entering the game query port, an internal address, or the passwordAdmin value. |
Restrict the firewall source range where practical. A fixed office, VPN, or management IP allow-list reduces exposure compared with accepting RCON from every Internet address. If administrators connect from changing networks, document the approved access process rather than leaving a broad rule permanently without review.
Restart DayZ and connect
BattlEye reads the configuration when the server starts. Saving the file alone does not reliably apply a new password or port to an already running process.
Rank #4
- Award winning innovative design that bridges the gap between roleplaying and boardgaming in space by integrating ship to ship and boarding action.
- You and your friends play characters as the crew of a ship laid out in modular format. Your ship is on a hex map. The enemy controls whatever challenges you face. Your continuing characters rise in power as you face tougher and more exciting challenges.
- Age 12+ / 1-6 players / 60-240 minutes playing time
- Second edition, advanced rule book sold seperately
- Stop the DayZ server cleanly through the host panel, service manager, or the method used to launch it.
- Confirm the edited file is still in the active BattlEye directory selected by
-bePathor-profiles. - Start the server and wait until it has finished loading BattlEye and the DayZ mission.
- In the RCON client, create a connection using the server’s public IP address or hostname.
- Set the transport to UDP, enter the exact
RConPortvalue, and enter the exactRConPasswordvalue. - Connect, then run a harmless read-only command such as
playersto verify that the session is authenticated.
If the client reports a timeout, test the network path before changing unrelated DayZ settings. If it reports an authentication failure quickly, check the password, file location, and whether the server was restarted after the edit.
Understand the two administrator passwords
passwordAdmin in serverDZ.cfg is the in-game administrator login used by DayZ’s own administrative mechanisms. RConPassword in the BattlEye configuration is the password for an external RCON tool such as a desktop client or a hosted dashboard. They are separate settings and can have different values. Changing passwordAdmin will not repair a failed RCON connection, and placing the RCON password in serverDZ.cfg will not configure BattlEye RCON.
RCON commands you can use
BattlEye lists the following commands among the available RCON operations:
| Command | Purpose |
|---|---|
players |
Display connected players and their identifying information as exposed by the server. |
admins |
Show the administrators recognized by BattlEye. |
kick |
Remove a player from the server. |
ban |
Apply a ban using the client’s supported syntax. |
addBan |
Add a ban entry. |
removeBan |
Remove an existing ban entry. |
bans |
List ban entries. |
say |
Send a message or broadcast through the supported BattlEye channel. |
loadBans |
Load ban data from the server’s ban-list storage. |
writeBans |
Write the current ban data to storage. |
Exact argument syntax can vary by client interface, so use the command help displayed by the client and test moderation actions on a private or low-risk session first. Keep an audit trail for kicks and bans, especially when several moderators share one RCON credential.
Best Value
- Dress in style on Nasdara, Sakhal, Chernarus or Livonia with our design. Built to survive in the badlands of dayz in any zombie wasteland so take a day off and dress to impress with our low insulation but high cool Z inspired design.
- Compatible with all PC gamers or console players. Game in comfort for dayz. Also a great gift idea for any discerning online survival gamers.
- Lightweight, Classic fit, Double-needle sleeve and bottom hem
Check RestrictRCon when moderation commands fail
The BattlEye setting RestrictRCon 1 enables RCON restrictions. Depending on the server and command, restrictions can prevent actions such as kicking, banning, or other connection restrictions even though the client successfully authenticates.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If players works but moderation commands are rejected, inspect the active BattlEye file for RestrictRCon and review the restrictions documented for your BattlEye version. Do not disable restrictions reflexively on a public server: first determine which administrators need which actions, then apply the least permissive setting that supports your moderation policy.
Troubleshoot a client that cannot connect
The client times out
- Confirm the server is running and BattlEye loaded successfully.
- Verify the client is pointed at the public IP or hostname, not a private LAN address.
- Check that the client uses UDP and the exact configured port.
- Open that UDP port in the operating-system firewall, cloud security group, and upstream firewall.
- Inspect provider and host firewall logs for dropped packets.
- Check that the chosen port is not already occupied by DayZ or another service.
The client says the password is wrong
- Compare the client value character by character with
RConPassword, including capitalization and punctuation. - Make sure you edited the file selected by
-bePathor-profiles. - Confirm the server was fully restarted after the password changed.
- Keep the password within BattleMetrics’ reported 32-character maximum for DayZ/ArmA RCON.
- Do not substitute
passwordAdminfromserverDZ.cfg.
The server starts but RCON is still unavailable
- Check the filename: Windows commonly uses
BEServer_x64.cfg; Linux documentation commonly usesbeserver_x64.cfg. - Check the spelling and capitalization of
RConPasswordandRConPort. - Ensure both required lines are present and not commented out by the hosting panel’s format.
- Remove an unnecessary
RConIPline, or replace it with a reachable public interface address. - Review the startup log and BattlEye log for the directory actually loaded by the process.
Some ban-list operations behave strangely
BattleMetrics documents a one-byte sequence-number limitation in the BattlEye RCON protocol. Very large ban-list responses can therefore be affected by protocol behavior rather than by a DayZ setting. Keep ban lists organized, use a client that handles the protocol correctly, and avoid treating a large-response anomaly as proof that the port or password is wrong.
Choose a local client or a hosted dashboard
A direct RCON client is usually simplest for one administrator who can reach the server over UDP. A hosted dashboard can add monitoring, role management, logs, and multi-server access, but it introduces a brokered connection and a third party whose network addresses must be allowed.
| Decision factor | Local RCON client | Hosted dashboard |
|---|---|---|
| Connection model | Direct UDP connection from the administrator’s device to the server. | The provider’s service connects or brokers access to the server. |
| Setup | Install a compatible client and configure the public endpoint, port, and password. | Enter server credentials in the dashboard and follow its connectivity instructions. |
| Command coverage | Depends on the client, but can expose players, kicks, bans, broadcasts, and ban-list commands. | Often combines RCON commands with player history, alerts, roles, and scheduled actions. |
| Audit and logging | May be limited to local client logs unless you export them. | Often provides centralized logs and moderator history; confirm retention and export rules. |
| Firewall control | Allow the administrators’ addresses. | Allow the provider’s documented source addresses as well as any direct administrators. |
| Multiple servers | Each server is configured separately in the client. | Usually designed to manage several servers from one account. |
| Cost | Depends on the client; no universal fee is established here. | Terms and subscription costs vary by provider and should be checked before adoption. |
BattleMetrics RCON
BattleMetrics is a hosted monitoring and administration option that documents DayZ RCON password limits, firewall checks, and the effects of an incorrectly specified RConIP. If you use it, follow its current source-address and onboarding requirements rather than copying a rule from an older setup.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →CFTools BattlEye RCon
CFTools provides another BattlEye-oriented administration approach. Compare its current command coverage, logging, IP allow-list process, multi-server features, and pricing with your operational needs; commercial terms can change and are not stated here.
Managed DayZ hosting
A managed host may provide a panel that edits the BattlEye file, restarts the server, and configures provider firewalls for you. Verify that the panel exposes the actual -bePath or -profiles directory, supports UDP RCON, and allows you to rotate the password and restrict source addresses. A panel shortcut is not a substitute for confirming the active file and port.
Quick Recap
Security and maintenance checklist
- Use a dedicated RCON password and rotate it when staff access changes.
- Keep the password at or below 32 characters for DayZ/ArmA compatibility.
- Allow UDP only on the selected RCON port; do not open a broad TCP rule by mistake.
- Limit firewall sources to trusted administrator or provider addresses where possible.
- Keep RCON on a port different from every DayZ game-server port.
- Leave
RConIPunset unless interface binding is required and the address is publicly reachable. - Review moderator permissions, command logs, and ban-list backups.
- After changing the file, restart the server and test with
playersbefore attempting a kick or ban. - Record the active BattlEye path so future administrators do not edit an inactive copy.
Fast verification sequence
- Locate the directory containing the BattlEye server DLL used by the running process.
- Open the correctly cased configuration file for the operating system.
- Confirm one
RConPasswordline and one freeRConPortline. - Remove or validate any
RConIPline. - Allow inbound UDP on that port at every firewall layer.
- Restart DayZ completely.
- Connect from an approved external client with the public endpoint.
- Run
players, then verify a non-destructive broadcast if your moderation policy permits it.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
