diff --git a/builtin/logical/transit/policy.go b/builtin/logical/transit/policy.go
index 9bd6ad30b1..022c429f57 100644
--- a/builtin/logical/transit/policy.go
+++ b/builtin/logical/transit/policy.go
@@ -370,7 +370,7 @@ func (p *Policy) Encrypt(context, nonce []byte, value string) (string, error) {
 		}
 	} else {
 		// Compute random nonce
-		nonce, err := uuid.GenerateRandomBytes(gcm.NonceSize())
+		nonce, err = uuid.GenerateRandomBytes(gcm.NonceSize())
 		if err != nil {
 			return "", errutil.InternalError{Err: err.Error()}
 		}