I was having a conversation with a security industry CTO about KMIP when the topic of HSMs and key managers came up. So naturally I asked him how he would describe the main difference between them. He gave a pretty interesting one word answer, which I will get to, but first some background.