diff --git a/tikv-configuration-file.md b/tikv-configuration-file.md
index 0b32caf8af150..18a587b047eda 100644
--- a/tikv-configuration-file.md
+++ b/tikv-configuration-file.md
@@ -636,6 +636,34 @@ Configuration items related to the I/O rate limiter.
+ Value options: `"read-only"`, `"write-only"`, and `"all-io"`
+ Default value: `"write-only"`
+## storage.max-ts
+
+Configuration items related to `max-ts`.
+
+`max-ts` is the maximum read timestamp known to the current TiKV node. It ensures linearizability and transaction concurrency control semantics for async commit and one-phase commit (1PC) transactions.
+
+### `action-on-invalid-update` New in v8.5.7
+
++ Determines how TiKV handles invalid `max-ts` update requests. If a read or write request uses a timestamp that exceeds **the sum of the PD TSO cached in TiKV and [`max-drift`](#max-drift-new-in-v857)**, TiKV considers it an invalid `max-ts` update request. Invalid `max-ts` update requests might break the linearizability and transaction concurrency control semantics of the TiDB cluster.
++ Value options:
+ + `"panic"`: TiKV panics. If the PD TSO cached in TiKV is not updated in time, TiKV uses an approximate method for validation, in which case invalid requests do not cause TiKV panic.
+ + `"error"`: TiKV returns an error and stops processing the request.
+ + `"log"`: TiKV prints an error log but still processes the request.
++ Default value: `"error"`
+
+### `cache-sync-interval` New in v8.5.7
+
++ Controls the interval at which TiKV updates its local PD TSO cache. TiKV periodically retrieves the latest timestamp from PD and caches it locally to check the validity of `max-ts`.
++ Default value: `"15s"`
+
+### `max-drift` New in v8.5.7
+
++ Specifies the maximum time by which the timestamp of a read or write request can exceed the PD TSO cached in TiKV.
++ If a read or write request uses a timestamp that exceeds **the sum of the PD TSO cached in TiKV and `max-drift`**, TiKV considers it an invalid `max-ts` update request and handles it according to the [`action-on-invalid-update`](#action-on-invalid-update-new-in-v857) configuration.
++ Default value: `"60s"`
++ This value must be greater than [`cache-sync-interval`](#cache-sync-interval-new-in-v857). Otherwise, TiKV fails configuration validation and cannot start.
++ It is recommended to set this value to at least three times the value of [`cache-sync-interval`](#cache-sync-interval-new-in-v857).
+
## pd
### `enable-forwarding` New in v5.0.0