diff --git a/Troubleshooting.md b/Troubleshooting.md
new file mode 100644
index 0000000..2c14fa2
--- /dev/null
+++ b/Troubleshooting.md
@@ -0,0 +1,30 @@
+# Troubleshooting
+
+## Enroll doesn't seem to 'see' files or directories
+
+You may need to use `--dangerous` to capture certain files or paths that Enroll normally considers sensitive.
+
+Inspect the `state.json` file generated by the `harvest` command to see a list of files that may have been excluded, and why. For example:
+
+```json
+    "excluded": [
+      {
+        "path": "/etc/openvpn/easy-rsa/pki/.rnd",
+        "reason": "binary_like"
+      }
+    ],
+```
+
+```json
+      {
+        "path": "/etc/subgid-",
+        "reason": "denied_path"
+      },
+```
+
+```json
+        {
+          "path": "/etc/openvpn/ca.key",
+          "reason": "sensitive_content"
+        },
+```
\ No newline at end of file