diff --git a/.changelog/9806.txt b/.changelog/9806.txt
new file mode 100644
index 000000000..2c2ceb1f3
--- /dev/null
+++ b/.changelog/9806.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+connect: if the token given to the vault provider returns no data avoid a panic
+```
diff --git a/agent/connect/ca/provider_vault.go b/agent/connect/ca/provider_vault.go
index d6b527f56..16563ce1c 100644
--- a/agent/connect/ca/provider_vault.go
+++ b/agent/connect/ca/provider_vault.go
@@ -82,6 +82,8 @@ func (v *VaultProvider) Configure(cfg ProviderConfig) error {
 	secret, err := client.Auth().Token().LookupSelf()
 	if err != nil {
 		return err
+	} else if secret == nil {
+		return fmt.Errorf("Could not look up Vault provider token: not found")
 	}
 	var token struct {
 		Renewable bool