diff --git a/src/main/resources/com/cloudbees/plugins/credentials/impl/CertificateCredentialsImpl/credentials.jelly b/src/main/resources/com/cloudbees/plugins/credentials/impl/CertificateCredentialsImpl/credentials.jelly
index 5c89dbd7a..5e86264ed 100644
--- a/src/main/resources/com/cloudbees/plugins/credentials/impl/CertificateCredentialsImpl/credentials.jelly
+++ b/src/main/resources/com/cloudbees/plugins/credentials/impl/CertificateCredentialsImpl/credentials.jelly
@@ -26,7 +26,15 @@
 
 <j:jelly xmlns:j="jelly:core" xmlns:f="/lib/form" xmlns:st="jelly:stapler">
   <f:entry title="${%Certificate}" field="keyStoreSource">
-    <f:hetero-radio field="keyStoreSource" descriptors="${descriptor.getPropertyType('keyStoreSource').applicableDescriptors}"/>
+    <j:set var="keyStoreSourceDescriptors" value="${descriptor.getPropertyType('keyStoreSource').applicableDescriptors}"/>
+    <j:choose>
+        <j:when test="${keyStoreSourceDescriptors.isEmpty()}">
+            <div class="warning">Jenkins has no <code>KeyStoreSources</code> available, Certificate credentials will not be able to be created.</div>
+        </j:when>
+        <j:otherwise>
+            <f:hetero-radio field="keyStoreSource" descriptors="${keyStoreSourceDescriptors}"/>
+        </j:otherwise>
+    </j:choose>
   </f:entry>
   <f:entry title="${%Password}" field="password">
     <f:password value="${instance==null || instance.passwordEmpty ? '' : instance.password}"/>