In public-key authentication, public-private key pairs are used to identify a user to an SSH server. A user creates both a public and private key, and then transfers a copy of the public key to the SSH server (NetScreen Device) to which the user wants secure access. The private key is kept on the user's local machine and is used to verify the identity of the user when the user attempts to connect to the NetScreen. The public and private keys must be correct for the server to allow the connection.

The public and private keys are generated via a key generation program. Usually, the public key defaults to a file called identity.pub. Discussion of the key generation is beyond the scope of this solution. For further assistance with the key generation, please refer to the documentation of the key generation program being used.