diff --git a/internal/exec/stages/disks/luks.go b/internal/exec/stages/disks/luks.go
index 72fde098b..7303e8643 100644
--- a/internal/exec/stages/disks/luks.go
+++ b/internal/exec/stages/disks/luks.go
@@ -329,9 +329,13 @@ func (s *stage) createLuks(config types.Config) error {
 								return fmt.Errorf("unmarshalling advertisement: %v", err)
 							}
 						}
+						thumbprint := ""
+						if tang.Thumbprint != nil {
+							thumbprint = *tang.Thumbprint
+						}
 						c.Pins.Tang = append(c.Pins.Tang, Tang{
 							URL:           tang.URL,
-							Thumbprint:    *tang.Thumbprint,
+							Thumbprint:    thumbprint,
 							Advertisement: adv,
 						})
 					}