diff --git a/functions-and-operators/aggregate-group-by-functions.md b/functions-and-operators/aggregate-group-by-functions.md
index 4094fa9522903..7e8094ce82fdf 100644
--- a/functions-and-operators/aggregate-group-by-functions.md
+++ b/functions-and-operators/aggregate-group-by-functions.md
@@ -154,3 +154,7 @@ group by id, val;
 The following aggregate functions are currently unsupported in TiDB. You can track our progress in [TiDB #7623](https://github.com/pingcap/tidb/issues/7623):
 
 - `JSON_ARRAYAGG`
+
+## Related system variables
+
+The `group_concat_max_len` variable sets the maximum number of items for the `GROUP_CONCAT()` function.
\ No newline at end of file
diff --git a/functions-and-operators/date-and-time-functions.md b/functions-and-operators/date-and-time-functions.md
index eeef80249f96a..32c2d2353c053 100644
--- a/functions-and-operators/date-and-time-functions.md
+++ b/functions-and-operators/date-and-time-functions.md
@@ -74,3 +74,7 @@ TiDB supports all of the [date and time functions](https://dev.mysql.com/doc/ref
 | [`YEARWEEK()`](https://dev.mysql.com/doc/refman/5.7/en/date-and-time-functions.html#function_yearweek) | Return the year and week                 |
 
 For details, see [Date and Time Functions](https://dev.mysql.com/doc/refman/5.7/en/date-and-time-functions.html).
+
+## Related system variables
+
+The `default_week_format` variable affects the `WEEK()` function.
\ No newline at end of file
diff --git a/functions-and-operators/encryption-and-compression-functions.md b/functions-and-operators/encryption-and-compression-functions.md
index 837b051aa82a5..d52b7ea790687 100644
--- a/functions-and-operators/encryption-and-compression-functions.md
+++ b/functions-and-operators/encryption-and-compression-functions.md
@@ -32,6 +32,10 @@ TiDB supports most of the [encryption and compression functions](https://dev.mys
 | [`ASYMMETRIC_SIGN()`](https://dev.mysql.com/doc/refman/5.7/en/enterprise-encryption-functions.html#function_asymmetric-sign)                          | Generate signature from digest                    |
 | [`ASYMMETRIC_VERIFY()`](https://dev.mysql.com/doc/refman/5.7/en/enterprise-encryption-functions.html#function_asymmetric-verify)                      | Verify that signature matches digest              |
 
+## Related system variables
+
+The `block_encryption_mode` variable sets the encryption mode that is used for `AES_ENCRYPT()` and `AES_DECRYPT()`.
+
 ## Unsupported functions
 
 * `DES_DECRYPT()`, `DES_ENCRYPT()`, `OLD_PASSWORD()`, `ENCRYPT()`: these functions were deprecated in MySQL 5.7 and removed in 8.0.
diff --git a/system-variables.md b/system-variables.md
index 79faa9dbb4f26..8b8179a4263ac 100644
--- a/system-variables.md
+++ b/system-variables.md
@@ -84,6 +84,12 @@ mysql> SELECT * FROM t1;
 - Default value: `ON`
 - Controls whether statements should automatically commit when not in an explicit transaction. See [Transaction Overview](/transaction-overview.md#autocommit) for more information.
 
+### block_encryption_mode
+
+- Scope: SESSION | GLOBAL
+- Default value: `aes-128-ecb`
+- Defines the encryption mode for the `AES_ENCRYPT()` and `AES_DECRYPT()` functions.
+
 ### character_set_client
 
 - Scope: SESSION | GLOBAL
@@ -112,7 +118,25 @@ mysql> SELECT * FROM t1;
 
 - Scope: SESSION | GLOBAL
 - Default value: `utf8mb4`
-- The character set used for new schemas when no character set is specified in the `CREATE SCHEMA` statement.
+- The default character set for the server.
+
+### collation_connection
+
+- Scope: SESSION | GLOBAL
+- Default value: `utf8mb4_bin`
+- This variable indicates the collation for string literals that do not have a specified collation.
+
+### collation_database
+
+- Scope: SESSION | GLOBAL
+- Default value: `utf8mb4_bin`
+- This variable indicates the collation of the default database in use. **It is NOT recommended to set this variable**. When a new default database is selected, the server changes the variable value.
+
+### collation_server
+
+- Scope: SESSION | GLOBAL
+- Default value: `utf8mb4_bin`
+- The default collation for the server.
 
 ### cte_max_recursion_depth
 
@@ -142,12 +166,38 @@ mysql> SELECT * FROM t1;
 - This variable sets the authentication method that the server advertises when the server-client connection is being established. Possible values for this variable are documented in [Authentication plugin status](/security-compatibility-with-mysql.md#authentication-plugin-status).
 - Value options: `mysql_native_password` and `caching_sha2_password`. For more details, see [Authentication plugin status](/security-compatibility-with-mysql.md#authentication-plugin-status).
 
+### default_week_format
+
+- Scope: SESSION | GLOBAL
+- Default value: `0`
+- Range: `[0, 7]`
+- Sets the week format used by the `WEEK()` function.
+
 ### foreign_key_checks
 
 - Scope: SESSION | GLOBAL
 - Default value: `OFF`
 - For compatibility, TiDB returns foreign key checks as `OFF`.
 
+### group_concat_max_len
+
+- Scope: SESSION | GLOBAL
+- Default value: `1024`
+- Range: `[4, 18446744073709551615]`
+- The maximum buffer size for items in the `GROUP_CONCAT()` function.
+
+### have_openssl
+
+- Scope: NONE
+- Default value: `DISABLED`
+- A read-only variable for MySQL compatibility. Set to `YES` by the server when the server has TLS enabled.
+
+### have_ssl
+
+- Scope: NONE
+- Default value: `DISABLED`
+- A read-only variable for MySQL compatibility. Set to `YES` by the server when the server has TLS enabled.
+
 ### hostname
 
 - Scope: NONE
@@ -200,6 +250,13 @@ mysql> SELECT * FROM t1;
 - Default value: `Apache License 2.0`
 - This variable indicates the license of your TiDB server installation.
 
+### max_allowed_packet
+
+- Scope: GLOBAL | SESSION
+- Default value: `67108864`
+- Range: `[1024, 1073741824]`
+- The maximum size of a packet for the MySQL protocol.
+
 ### max_execution_time
 
 - Scope: SESSION | GLOBAL
@@ -238,6 +295,24 @@ mysql> SELECT * FROM t1;
 - Range: `[0, 18446744073709551615]`
 - The maximum number of rows returned by the `SELECT` statements.
 
+### ssl_ca
+
+- Scope: NONE
+- Default value: ""
+- The location of the certificate authority file (if there is one).
+
+### ssl_cert
+
+- Scope: NONE
+- Default value: ""
+- The location of the certificate file (if there is a file) that is used for SSL/TLS connections.
+
+### ssl_key
+
+- Scope: NONE
+- Default value: ""
+- The location of the private key file (if there is one) that is used for SSL/TLS connections.
+
 ### system_time_zone
 
 - Scope: NONE