# Credit History Credentials Management (Mexico)

{{<tags>}}

This guide explains how to manage your **Buró de Crédito** and **Círculo de Crédito** credentials directly from the Truora platform. With this feature, you can create, edit, and delete your financial entity credentials autonomously, without needing to contact support.

> **Important:** This feature is available exclusively for accounts that use Buró de Crédito and/or Círculo de Crédito databases in **Mexico**. Access to the Credentials Configuration tab is enabled by Truora through **role-based permissions**. If you don't see this option, please contact your account manager or our support team to request access.

## Prerequisites

- An active Truora account with **Background Checks** enabled for Mexico.
- Role-based permissions granted by Truora to access the Credentials Configuration tab.
- Valid credentials for **Buró de Crédito** (username and password).
- Valid credentials for **Círculo de Crédito** (username, password, x-api-key, private key, and CDC public key). See the [Círculo de Crédito Credentials](#círculo-de-crédito-credentials) section below for details.

---

## Credentials Overview by Provider

### Buró de Crédito Credentials

Buró de Crédito requires standard authentication credentials:

{{<table "table w-auto small m-auto table-striped table-bordered">}}
| Credential | Purpose |
|------------|---------|
| **username** | Authentication with Buró de Crédito |
| **password** | Authorized access to the service |
{{</table>}}

These credentials are provided by Buró de Crédito as part of your contract agreement.

> **Important:** Buró de Crédito credentials **can expire every 30 days**. Make sure to update them in the Credentials Configuration before they expire to avoid service interruptions.

### Círculo de Crédito Credentials

Círculo de Crédito requires additional credentials beyond username and password to operate the service. All credentials listed below must be configured for the integration to work properly.

{{<table "table w-auto small m-auto table-striped table-bordered">}}
| Credential | Purpose |
|------------|---------|
| **username** | Grantor authentication |
| **password** | Authorized access |
| **x-api-key** | API consumption authorization token |
| **private_key** | Signs requests to generate the `x-signature` header |
| **cdc_public_key** | Validates the signature of responses from Círculo de Crédito |
{{</table>}}

> **Note:** 
> - These credentials are obtained through your contract with Círculo de Crédito. Make sure to have them ready before configuring the integration in Truora. 
> - Círculo de Crédito credentials **can expire every 90 days**, so remember to update them in the Credentials Configuration before they expire to avoid service interruptions.

### How to Obtain Círculo de Crédito Credentials

- **Username and Password:** The `username` and `password` must be the same ones you use to access the [Círculo de Crédito Grantors Portal](https://otorgantes.circulodecredito.com.mx).

- **API Key (x-api-key):** The `x-api-key` is obtained from the apps section in the [Círculo de Crédito Developer Portal](https://developer.circulodecredito.com.mx). See steps 1 and 2 of the [API Hub Integration Guide](https://developer.circulodecredito.com.mx/guia_de_inicio) for details on creating an account and registering your application.

- **Private Key and CDC Public Key:** Círculo de Crédito's API Hub recommends using [OpenSSL](https://www.openssl.org) to generate the key pair. For the full official walkthrough, see steps 5 and 6 of the [API Hub Integration Guide](https://developer.circulodecredito.com.mx/guia_de_inicio). Below is a summary of the process:

  - **Step 1 — Generate the private key:** The private key will be stored in the `pri_key.pem` file.
   {{<code lang="bash" lang_title="OpenSSL">}}
      openssl ecparam -name secp384r1 -genkey -out pri_key.pem
   {{</code>}}

  > **Warning:** Never share your private key. Always keep it with proper access privileges in a secure location.

  - **Step 2 — Generate the certificate (public key):** The `certificate.pem` file contains your public key.
   {{<code lang="bash" lang_title="OpenSSL">}}
      openssl req -new -x509 -days 365 -key pri_key.pem -out certificate.pem -subj "/C=MX/ST=CDMX/L=MH/O=CDC/CN=CDC"
   {{</code>}}

  - **Step 3 — Extract the private key value:** From the output, take the `priv` value, remove all colons (`:`) and line breaks so it becomes a single continuous string. This is your `private_key` value.
   {{<code lang="bash" lang_title="OpenSSL">}}
      openssl ec -in pri_key.pem -noout -text
   {{</code>}}

  - **Step 4 — Upload your certificate and obtain the CDC public key:**
    1. Go to the [Círculo de Crédito Developer Portal](https://developer.circulodecredito.com.mx).
    2. Navigate to **My Account > Apps**.
    3. Select the application you registered.
    4. Go to the **Certificates** section.
    5. In the **Your certificate** area, select the `certificate.pem` file and click **Upload**.
    6. The portal will confirm your certificate was saved successfully.
    7. Download the CDC certificate (e.g., `cdc_cert_####.pem`).

  - **Step 5 — Extract the CDC public key value:** Replace `cdc_cert_####.pem` with the actual filename downloaded from the portal. From the output, take the `pub` value, remove all colons (`:`) and line breaks so it becomes a single continuous string. This is your `cdc_public_key` value.
   {{<code lang="bash" lang_title="OpenSSL">}}
      openssl x509 -in cdc_cert_####.pem -noout -text
   {{</code>}}

> For the complete integration guide including video tutorials, visit the [Círculo de Crédito API Hub Integration Guide](https://developer.circulodecredito.com.mx/guia_de_inicio).

---

## Accessing the Credentials Configuration

1. Log into the [**Truora Dashboard**](https://account.truora.com/account#/auth/login).
2. Navigate to the **Background Checks** product from the products view.
3. In the sidebar menu, select **Configuration**.
4. Once in the Configuration view, click on the **Credentials Configuration** tab.

{{<img src="/images/illustrations/checks_credentials/credentials_config_tab.gif" alt="Credentials Configuration tab in the Configuration module" width="100%" class="rounded-md">}}

> **Note:** If you don't see the **Credentials Configuration** tab, it means your account doesn't have the required permissions. Contact Truora support to enable this feature.

---

## Creating a Credential

1. In the **Credentials Configuration** tab, click the **+ Create credential** button located at the top right of the table.

   {{<img src="/images/illustrations/checks_credentials/create_credential_button.gif" alt="Create credential button" width="100%" class="rounded-md">}}

2. A modal window will appear with the following base fields:
   - **Username:** Enter the username provided by the financial entity.
   - **Password:** Enter the corresponding password.
   - **Database:** Select the corresponding database from the dropdown menu (e.g., Buró de Crédito, Círculo de Crédito).

3. Depending on the selected database, **additional fields may be required**. For example, when selecting **Círculo de Crédito**, the following extra fields will appear:
   - **Cdc Public Key:** The CDC public key value obtained from the Círculo de Crédito portal.
   - **Private Key:** The private key value generated via OpenSSL.
   - **Api Key:** The x-api-key obtained from the Círculo de Crédito Developer Portal.

   See the [Círculo de Crédito Credentials](#círculo-de-crédito-credentials) section for details on how to obtain these values.

   {{<img src="/images/illustrations/checks_credentials/create_credential_circulo_modal.gif" alt="Create credential modal for Círculo de Crédito with additional fields" width="100%" class="rounded-md">}}

4. Once all required fields are filled in, click **Save credential** to store the configuration.

> **Tip:** Make sure your credentials are up-to-date. If your financial entity credentials expire or are changed, you'll need to update them here to keep your background checks running smoothly.

---

## Viewing Credentials

Once credentials have been created, they will appear in the credentials table with the following columns:

{{<table "table w-auto small m-auto table-striped table-bordered">}}
| Column | Description |
|--------|-------------|
| **Database ID** | The unique identifier of the database configuration |
| **Name** | The name of the financial entity database (e.g., Buró de crédito) |
| **Username** | The username associated with the credential |
| **Options** | Actions menu for editing or deleting the credential |
{{</table>}}

{{<img src="/images/illustrations/checks_credentials/viewing_credentials.gif" alt="Viewing Credentials" width="100%" class="rounded-md">}}

---

## Editing a Credential

If you need to update a credential (for example, when a password changes):

1. In the credentials table, locate the credential you want to modify.
2. Go to the **Options** column and click the **three-dot icon** (⋯).
3. A dropdown menu will appear. Select **Edit**.
4. The edit modal will display all fields for the selected database. **All fields are required and must be filled in**, even if you only need to change one value. Re-enter all credential values to save the update.
5. Click **Save credential** to apply the changes.

> **Important:** When editing a credential, the modal does not pre-fill sensitive values (passwords, keys) for security reasons. You must provide all values again to successfully save the changes.

{{<img src="/images/illustrations/checks_credentials/edit_option.gif" alt="Options menu showing Edit actions" width="100%" class="rounded-md">}}

---

## Deleting a Credential

If you need to remove a credential:

1. In the credentials table, locate the credential you want to delete.
2. Go to the **Options** column and click the **three-dot icon** (⋯).
3. A dropdown menu will appear. Select **Delete**.
4. Confirm the deletion when prompted.

> **Warning:** Deleting a credential will prevent background checks from querying the associated database. Make sure you no longer need this database before deleting its credentials.

{{<img src="/images/illustrations/checks_credentials/delete_option.gif" alt="Options menu showing Delete actions" width="100%" class="rounded-md">}}

---

## Troubleshooting

{{<table "table w-auto small m-auto table-striped table-bordered">}}
| Issue | Solution |
|-------|----------|
| **Credentials Configuration tab not visible** | Contact Truora support to request role-based access for your account |
| **Cannot save credential** | Verify that all required fields (username, password, database) are filled in correctly |
| **Background checks failing after credential change** | Ensure the updated credentials are valid and active with the financial entity |
| **Your contracted credit history database is failing in all checks** | Review that the stored credentials for that database are valid and not expired. If they are expired, update them in the Credentials Configuration |
| **Database not appearing in dropdown** | Only databases enabled for your account will appear. Contact your account manager if a database is missing |
{{</table>}}

---

## Important Notes

- **Role-based access:** The Credentials Configuration feature is controlled by role-based permissions. Only authorized users within your organization can manage credentials.
- **Mexico only:** This feature is currently available exclusively for Mexican financial entity databases (Buró de Crédito and Círculo de Crédito).
- **Credential security:** Passwords are stored securely and are not displayed in plain text after being saved.
- **Immediate effect:** Changes to credentials take effect immediately for all new background checks.

---

## Need Help?

If you have any questions or need assistance, reach out to us through our [**WhatsApp channel**](https://wa.link/sgyk38).

---

## Related Documentation

- [Background Checks Configuration Module](/guides/checks_configuration_module/) - Configure global settings and custom check types
- [Background Checks via Dashboard](/guides/checks/) - How to create background checks
- [Account Setup and Access](/guides/account/) - Account management and access