diff --git a/command/certificate/create.go b/command/certificate/create.go
index a5a32e4a5..f20498908 100644
--- a/command/certificate/create.go
+++ b/command/certificate/create.go
@@ -714,7 +714,8 @@ func savePrivateKey(filename string, priv interface{}, insecure bool) error {
 	}
 
 	var pass []byte
-	pass, err := ui.PromptPassword("Please enter the password to encrypt the private key")
+	pass, err := ui.PromptPassword("Please enter the password to encrypt the private key",
+		ui.WithValidateNotEmpty())
 	if err != nil {
 		return errors.Wrap(err, "error reading password")
 	}