diff --git a/src/qemu/qemu_domain.c b/src/qemu/qemu_domain.c
index b1c951fb2f0b48c390c0491a372b09f5416ea7cc..4a5378f7372583c832f44054ca7159125193d784 100644
--- a/src/qemu/qemu_domain.c
+++ b/src/qemu/qemu_domain.c
@@ -764,6 +764,7 @@ qemuDomainDiskPrivateDispose(void *obj)
     qemuDomainDiskPrivatePtr priv = obj;
 
     qemuDomainSecretInfoFree(&priv->secinfo);
+    qemuDomainSecretInfoFree(&priv->encinfo);
 }
 
 
diff --git a/src/qemu/qemu_domain.h b/src/qemu/qemu_domain.h
index 2443e97d81aacc69b5be5f5f67eb48d6896ab6f6..fa536e0242b4dfe59cd2072cf6b5f4d9fea43ed1 100644
--- a/src/qemu/qemu_domain.h
+++ b/src/qemu/qemu_domain.h
@@ -299,6 +299,11 @@ struct _qemuDomainDiskPrivate {
      * NB: *not* to be written to qemu domain object XML */
     qemuDomainSecretInfoPtr secinfo;
 
+    /* for storage devices using encryption/secret
+     * Can have both <auth> and <encryption> for some disks
+     * NB:*not* to be written to qemu domain object XML */
+    qemuDomainSecretInfoPtr encinfo;
+
     /* information about the device */
     bool tray; /* device has tray */
     bool removable; /* device media can be removed/changed */