Index: /trunk/doc/manual/en_US/user_AdvancedTopics.xml
===================================================================
--- /trunk/doc/manual/en_US/user_AdvancedTopics.xml	(revision 81182)
+++ /trunk/doc/manual/en_US/user_AdvancedTopics.xml	(revision 81183)
@@ -6256,4 +6256,13 @@
             This limitation may be addressed in a future &product-name;
             version.
+          </para>
+        </listitem>
+
+        <listitem>
+          <para>
+            The disk encryption feature can protect the content of the
+            disks configured for a VM only. It does not cover any other
+            data related to a VM, including saved state or the
+            configuration file itself.
           </para>
         </listitem>
Index: /trunk/doc/manual/en_US/user_BasicConcepts.xml
===================================================================
--- /trunk/doc/manual/en_US/user_BasicConcepts.xml	(revision 81182)
+++ /trunk/doc/manual/en_US/user_BasicConcepts.xml	(revision 81183)
@@ -1145,4 +1145,11 @@
         encryption and the encryption password.
       </para>
+
+      <note>
+        <para>
+          All files related to the virtual machine except disk images are
+          stored unencrypted.
+        </para>
+      </note>
 
     </sect2>
Index: /trunk/doc/manual/en_US/user_Security.xml
===================================================================
--- /trunk/doc/manual/en_US/user_Security.xml	(revision 81182)
+++ /trunk/doc/manual/en_US/user_Security.xml	(revision 81183)
@@ -503,4 +503,17 @@
         </listitem>
 
+        <listitem>
+          <para>
+            When using the &product-name; Extension Pack provided by
+            Oracle for disk encryption, the data stored in disk images can
+            optionally be encrypted. See <xref linkend="diskencryption" />.
+            This feature covers disk image content only. All other data
+            for a virtual machine is stored unencrypted, including the VM's
+            memory and device state which is stored as part of a saved
+            state, both when created explicitly or part of a snapshot of a
+            running VM.
+          </para>
+        </listitem>
+
       </itemizedlist>
 
