diff --git a/specification/vmwarevirtustream/resource-manager/Microsoft.VMwareVirtustream/preview/2019-08-09-preview/vmwarevirtustream.json b/specification/vmwarevirtustream/resource-manager/Microsoft.VMwareVirtustream/preview/2019-08-09-preview/vmwarevirtustream.json
index 14389afe3a36..1da803b8ff5a 100644
--- a/specification/vmwarevirtustream/resource-manager/Microsoft.VMwareVirtustream/preview/2019-08-09-preview/vmwarevirtustream.json
+++ b/specification/vmwarevirtustream/resource-manager/Microsoft.VMwareVirtustream/preview/2019-08-09-preview/vmwarevirtustream.json
@@ -941,7 +941,8 @@
         },
         "password": {
           "description": "The password of the Active Directory user with a minimum of read-only access to Base DN for users and groups.",
-          "type": "string"
+          "type": "string",
+          "x-ms-secret": true
         }
       }
     },
@@ -1040,11 +1041,13 @@
         },
         "vcenterPassword": {
           "description": "Optionally, set the vCenter admin password when the private cloud is created",
-          "type": "string"
+          "type": "string",
+          "x-ms-secret": true
         },
         "nsxtPassword": {
           "description": "Optionally, set the NSX-T Manager password when the private cloud is created",
-          "type": "string"
+          "type": "string",
+          "x-ms-secret": true
         }
       }
     },
@@ -1156,7 +1159,8 @@
         "nsxtPassword": {
           "description": "NSX-T Manager password",
           "type": "string",
-          "readOnly": true
+          "readOnly": true,
+          "x-ms-secret": true
         },
         "vcenterUsername": {
           "description": "vCenter admin username",
@@ -1166,7 +1170,8 @@
         "vcenterPassword": {
           "description": "vCenter admin password",
           "type": "string",
-          "readOnly": true
+          "readOnly": true,
+          "x-ms-secret": true
         }
       }
     }