diff --git a/docs-main/global-synchronizer/reference/configuration-reference.mdx b/docs-main/global-synchronizer/reference/configuration-reference.mdx
index 50d4ecd7c..a060fbc3c 100644
--- a/docs-main/global-synchronizer/reference/configuration-reference.mdx
+++ b/docs-main/global-synchronizer/reference/configuration-reference.mdx
@@ -177,12 +177,25 @@ canton.participants.participant.ledger-api.tls.client-auth {
 }
 ```
 
-All private keys must be in PKCS#8 PEM format. You can also restrict the minimum TLS version and allowed cipher suites:
+All private keys must be in PKCS#8 PEM format. You can also restrict the minimum TLS version:
 
 ```
 canton.participants.participant.ledger-api.tls.minimum-server-protocol-version = TLSv1.3
 ```
 
+and allowed cipher suites:
+
+```
+canton.participants.participant.ledger-api.tls.ciphers =
+  [
+    "TLS_AES_256_GCM_SHA384",
+    "TLS_AES_128_GCM_SHA256",
+    "TLS_CHACHA20_POLY1305_SHA256"
+  ]
+```
+
+For 1.3 suites, customize the supported key exchanges using the Java `jdk.tls.namedGroups` property.
+
 ## Traffic configuration
 
 Your validator automatically purchases traffic (sequencer throughput) using Canton Coin. Configure the top-up behavior in `standalone-validator-values.yaml`: