diff --git a/ConfigureChecks.cmake b/ConfigureChecks.cmake
index a24be64d..4639f0c1 100644
--- a/ConfigureChecks.cmake
+++ b/ConfigureChecks.cmake
@@ -456,6 +456,7 @@ if (WITH_PKCS11_URI)
         if (NOT PKCS11_PROVIDER)
             set(WITH_PKCS11_PROVIDER 0)
             message(WARNING "Could not find pkcs11 provider! Falling back to engines")
+            message(WARNING "The support for engines is deprecated in OpenSSL and will be removed from libssh in the future releases.")
         endif (NOT PKCS11_PROVIDER)
     endif ()
 endif()
diff --git a/doc/pkcs11.dox b/doc/pkcs11.dox
index c2732a81..d139f7d4 100644
--- a/doc/pkcs11.dox
+++ b/doc/pkcs11.dox
@@ -21,6 +21,9 @@ To build and use libssh with PKCS #11 support:
 3. Install and configure engine_pkcs11 (https://github.com/OpenSC/libp11).
 4. Plug in a working smart card or configure softhsm (https://www.opendnssec.org/softhsm).
 
+@warning The support for Engines was deprecated in OpenSSL 3.0 so this approach
+is deprecated in libssh 0.11.x.
+
 # Pre-requisites (OpenSSL 3.0.8+)
 
 The OpenSSL 3.0 is deprecating usage of low-level engines in favor of high-level