diff --git a/src/conf/storage_encryption_conf.c b/src/conf/storage_encryption_conf.c
index ed7168814fef3c5eaf54b739f3af3d49c64eac19..7f68d67da643bf1c5758fedc0e41bc4e0c2a9b4f 100644
--- a/src/conf/storage_encryption_conf.c
+++ b/src/conf/storage_encryption_conf.c
@@ -228,7 +228,7 @@ virStorageEncryptionSecretFormat(virBufferPtr buf,
     }
 
     virUUIDFormat(secret->uuid, uuidstr);
-    virBufferVSprintf(buf, "      <secret type='%s' uuid='%s'/>\n", type, uuidstr);
+    virBufferVSprintf(buf, "        <secret type='%s' uuid='%s'/>\n", type, uuidstr);
     return 0;
 }
 
@@ -245,14 +245,14 @@ virStorageEncryptionFormat(virBufferPtr buf,
                               "%s", _("unexpected encryption format"));
         return -1;
     }
-    virBufferVSprintf(buf, "    <encryption format='%s'>\n", format);
+    virBufferVSprintf(buf, "      <encryption format='%s'>\n", format);
 
     for (i = 0; i < enc->nsecrets; i++) {
         if (virStorageEncryptionSecretFormat(buf, enc->secrets[i]) < 0)
             return -1;
     }
 
-    virBufferAddLit(buf, "    </encryption>\n");
+    virBufferAddLit(buf, "      </encryption>\n");
 
     return 0;
 }