It makes use of an on premise key server as an alternative, to provide the non-public key of the server. See the diagram right here for particulars on how this…