diff --git a/src/qemu/qemu_domain.c b/src/qemu/qemu_domain.c
index ac021d214568847850a51b83bec2cfb07eb2a09c..7bbaf8a53a9a66dbe69f1415ac828d6c9dc75a08 100644
--- a/src/qemu/qemu_domain.c
+++ b/src/qemu/qemu_domain.c
@@ -9988,6 +9988,12 @@ qemuDomainPrepareStorageSourceTLS(virStorageSourcePtr src,
     case VIR_STORAGE_NET_PROTOCOL_FTPS:
     case VIR_STORAGE_NET_PROTOCOL_TFTP:
     case VIR_STORAGE_NET_PROTOCOL_SSH:
+        if (src->haveTLS == VIR_TRISTATE_BOOL_YES) {
+            virReportError(VIR_ERR_CONFIG_UNSUPPORTED,
+                           _("TLS transport is not supported for disk protocol '%s'"),
+                           virStorageNetProtocolTypeToString(src->protocol));
+            return -1;
+        }
         break;
 
     case VIR_STORAGE_NET_PROTOCOL_NONE: