diff --git a/src/provision.js b/src/provision.js
index caca353f9..db3872abb 100644
--- a/src/provision.js
+++ b/src/provision.js
@@ -212,6 +212,8 @@ function restore(backupConfig, backupId, version, sysinfoConfig, auditSource, ca
             if ('password' in backupConfig) {
                 backupConfig.encryption = backups.generateEncryptionKeysSync(backupConfig.password);
                 delete backupConfig.password;
+            } else {
+                backupConfig.encryption = null;
             }
 
             sysinfo.testConfig(sysinfoConfig, function (error) {