set password = autogenerated in the EE profile. You can now add end entities in Admin and RA UI, using email notifications to send auto-generated passwords.
You can not however use the CLI to add the end entity. Something like this will not work:
bin/ejbca.sh ra addendentity --username tomas --dn "C=SE,O=xx,CN=Tomas" --caname "ManagementCA" --type 256 --token USERGENERATED --email firstname.lastname@example.org --certprofile Client --eeprofile User
If --password is not set you are prompted, and can not enter empty pwd. You can niehter not enter null or an empty pwd as the --password argument.
This is an old regression, from something like 6.0.0, but a user have problems with their work-flow after upgrade.