diff --git a/pkg/kms/kes.go b/pkg/kms/kes.go
index 7d6312533..e21712d11 100644
--- a/pkg/kms/kes.go
+++ b/pkg/kms/kes.go
@@ -115,7 +115,7 @@ func (c *kesClient) GenerateKey(keyID string, ctx Context) (DEK, error) {
 	}
 	dek, err := c.client.GenerateKey(context.Background(), keyID, ctxBytes)
 	if err != nil {
-		return DEK{}, nil
+		return DEK{}, err
 	}
 	return DEK{
 		KeyID:      keyID,