diff --git a/azure_arc_app_services_jumpstart/aks/ARM/clientVm.json b/azure_arc_app_services_jumpstart/aks/ARM/clientVm.json
index a5f044ea42..9d8f7d9f24 100644
--- a/azure_arc_app_services_jumpstart/aks/ARM/clientVm.json
+++ b/azure_arc_app_services_jumpstart/aks/ARM/clientVm.json
@@ -326,7 +326,7 @@
                 "type": "CustomScriptExtension",
                 "typeHandlerVersion": "1.10",
                 "autoUpgradeMinorVersion": true,
-                "settings": {
+                "protectedSettings": {
                     "fileUris": [
                         "[uri(parameters('templateBaseUrl'), 'artifacts/Bootstrap.ps1')]"
                     ],
diff --git a/azure_arc_app_services_jumpstart/cluster_api/capi_azure/ARM/clientVm.json b/azure_arc_app_services_jumpstart/cluster_api/capi_azure/ARM/clientVm.json
index 8dae4511be..0acf24eea3 100644
--- a/azure_arc_app_services_jumpstart/cluster_api/capi_azure/ARM/clientVm.json
+++ b/azure_arc_app_services_jumpstart/cluster_api/capi_azure/ARM/clientVm.json
@@ -325,7 +325,7 @@
         "type": "CustomScriptExtension",
         "typeHandlerVersion": "1.10",
         "autoUpgradeMinorVersion": true,
-        "settings": {
+        "protectedSettings": {
           "fileUris": [
             "[uri(parameters('templateBaseUrl'), 'artifacts/Bootstrap.ps1')]"
           ],
diff --git a/azure_arc_data_jumpstart/aks/ARM/clientVm.json b/azure_arc_data_jumpstart/aks/ARM/clientVm.json
index 5798333b98..32b9693959 100644
--- a/azure_arc_data_jumpstart/aks/ARM/clientVm.json
+++ b/azure_arc_data_jumpstart/aks/ARM/clientVm.json
@@ -326,7 +326,7 @@
         "type": "CustomScriptExtension",
         "typeHandlerVersion": "1.10",
         "autoUpgradeMinorVersion": true,
-        "settings": {
+        "protectedSettings": {
           "fileUris": [
             "[uri(parameters('templateBaseUrl'), 'artifacts/Bootstrap.ps1')]"
           ],
diff --git a/azure_arc_data_jumpstart/aro/ARM/clientVm.json b/azure_arc_data_jumpstart/aro/ARM/clientVm.json
index a0fb796f61..8827757510 100644
--- a/azure_arc_data_jumpstart/aro/ARM/clientVm.json
+++ b/azure_arc_data_jumpstart/aro/ARM/clientVm.json
@@ -326,7 +326,7 @@
         "type": "CustomScriptExtension",
         "typeHandlerVersion": "1.10",
         "autoUpgradeMinorVersion": true,
-        "settings": {
+        "protectedSettings": {
           "fileUris": [
             "[uri(parameters('templateBaseUrl'), 'artifacts/Bootstrap.ps1')]"
           ],
diff --git a/azure_arc_data_jumpstart/cluster_api/capi_azure/ARM/clientVm.json b/azure_arc_data_jumpstart/cluster_api/capi_azure/ARM/clientVm.json
index da48e9a680..fb03a656d0 100644
--- a/azure_arc_data_jumpstart/cluster_api/capi_azure/ARM/clientVm.json
+++ b/azure_arc_data_jumpstart/cluster_api/capi_azure/ARM/clientVm.json
@@ -332,7 +332,7 @@
         "type": "CustomScriptExtension",
         "typeHandlerVersion": "1.10",
         "autoUpgradeMinorVersion": true,
-        "settings": {
+        "protectedSettings": {
           "fileUris": [
             "[uri(parameters('templateBaseUrl'), 'artifacts/Bootstrap.ps1')]"
           ],
diff --git a/azure_arc_data_jumpstart/kubeadm/azure/arm_template/client_vm_deployment.json b/azure_arc_data_jumpstart/kubeadm/azure/arm_template/client_vm_deployment.json
index 22e328a11b..1d0dc354ce 100644
--- a/azure_arc_data_jumpstart/kubeadm/azure/arm_template/client_vm_deployment.json
+++ b/azure_arc_data_jumpstart/kubeadm/azure/arm_template/client_vm_deployment.json
@@ -392,7 +392,7 @@
             "type": "CustomScriptExtension",
             "typeHandlerVersion": "1.10",
             "autoUpgradeMinorVersion": true,
-            "settings": {
+            "protectedSettings": {
               "fileUris": [
                 "https://raw.githubusercontent.com/microsoft/azure_arc/main/azure_arc_data_jumpstart/kubeadm/azure/arm_template/scripts/ClientTools.ps1"
               ],
diff --git a/azure_arc_data_jumpstart/microk8s/azure/arm_template/clientVm.json b/azure_arc_data_jumpstart/microk8s/azure/arm_template/clientVm.json
index 501664a004..0f3fdbb117 100644
--- a/azure_arc_data_jumpstart/microk8s/azure/arm_template/clientVm.json
+++ b/azure_arc_data_jumpstart/microk8s/azure/arm_template/clientVm.json
@@ -318,7 +318,7 @@
         "type": "CustomScriptExtension",
         "typeHandlerVersion": "1.10",
         "autoUpgradeMinorVersion": true,
-        "settings": {
+        "protectedSettings": {
           "fileUris": [
             "[uri(parameters('templateBaseUrl'), 'artifacts/Bootstrap.ps1')]"
           ],
diff --git a/azure_arc_ml_jumpstart/aks/arm_template/clientVm.json b/azure_arc_ml_jumpstart/aks/arm_template/clientVm.json
index 35e7a697cc..649be6279d 100644
--- a/azure_arc_ml_jumpstart/aks/arm_template/clientVm.json
+++ b/azure_arc_ml_jumpstart/aks/arm_template/clientVm.json
@@ -260,7 +260,7 @@
         "type": "CustomScriptExtension",
         "typeHandlerVersion": "1.10",
         "autoUpgradeMinorVersion": true,
-        "settings": {
+        "protectedSettings": {
           "fileUris": [
             "[uri(parameters('templateBaseUrl'), 'artifacts/Bootstrap.ps1')]"
           ],
diff --git a/azure_arc_servers_jumpstart/azure/windows/arm_template/azuredeploy.json b/azure_arc_servers_jumpstart/azure/windows/arm_template/azuredeploy.json
index 6cb7676519..07f3ef70f1 100644
--- a/azure_arc_servers_jumpstart/azure/windows/arm_template/azuredeploy.json
+++ b/azure_arc_servers_jumpstart/azure/windows/arm_template/azuredeploy.json
@@ -289,7 +289,7 @@
                 "type": "CustomScriptExtension",
                 "typeHandlerVersion": "1.10",
                 "autoUpgradeMinorVersion": true,
-                "settings": {
+                "protectedSettings": {
                     "fileUris": [
                         "https://raw.githubusercontent.com/microsoft/azure_arc/main/azure_arc_servers_jumpstart/azure/windows/arm_template/scripts/install_arc_agent.ps1"
                     ],
diff --git a/azure_arc_servers_jumpstart/privatelink/azuredeploy.json b/azure_arc_servers_jumpstart/privatelink/azuredeploy.json
index db87e3fa6d..080acd1364 100644
--- a/azure_arc_servers_jumpstart/privatelink/azuredeploy.json
+++ b/azure_arc_servers_jumpstart/privatelink/azuredeploy.json
@@ -523,7 +523,7 @@
                                 "type": "CustomScriptExtension",
                                 "typeHandlerVersion": "1.10",
                                 "autoUpgradeMinorVersion": true,
-                                "settings": {
+                                "protectedSettings": {
                                     "fileUris": [
                                         "https://raw.githubusercontent.com/microsoft/azure_arc/main/azure_arc_servers_jumpstart/privatelink/artifacts/Bootstrap.ps1"
                                     ],
diff --git a/azure_arc_sqlsrv_jumpstart/azure/arm_template/azuredeploy.json b/azure_arc_sqlsrv_jumpstart/azure/arm_template/azuredeploy.json
index 80b51aabfa..c64bdb248c 100644
--- a/azure_arc_sqlsrv_jumpstart/azure/arm_template/azuredeploy.json
+++ b/azure_arc_sqlsrv_jumpstart/azure/arm_template/azuredeploy.json
@@ -266,7 +266,7 @@
             "type": "CustomScriptExtension",
             "typeHandlerVersion": "1.10",
             "autoUpgradeMinorVersion": true,
-            "settings": {
+            "protectedSettings": {
               "fileUris": [
                 "https://raw.githubusercontent.com/microsoft/azure_arc/main/azure_arc_sqlsrv_jumpstart/azure/arm_template/scripts/ClientTools.ps1"
               ],