diff --git a/azurerm/helpers/azure/hdinsight.go b/azurerm/helpers/azure/hdinsight.go
index 264f4efc168e..13e30f12af32 100644
--- a/azurerm/helpers/azure/hdinsight.go
+++ b/azurerm/helpers/azure/hdinsight.go
@@ -94,6 +94,10 @@ func SchemaHDInsightsGateway() *schema.Schema {
 					Required:  true,
 					ForceNew:  true,
 					Sensitive: true,
+					// Azure returns the key as *****. We'll suppress that here.
+					DiffSuppressFunc: func(k, old, new string, d *schema.ResourceData) bool {
+						return (new == d.Get(k).(string)) && (old == "*****")
+					},
 				},
 			},
 		},