...
The InCommon Federation is based on the Explicit Key Trust Model, one of several possible metadata trust models. To bootstrap the trust fabric of the Federation, participants download and configure an authentic copy of the metadata verification certificate into their metadata refresh process. The certificate must be obtained securely since all subsequent operations depend on it.
...