There are several usage patterns in the context of a KMS:
- Passthrough mode — direct communication with the HSM via KMIP; the KMS simply acts as a proxy.
- Storage layer mode — KMIP objects are stored directly in the HSM.
- Hybrid client mode — provides a PKCS#11 interface built on top of KMIP, allowing legacy clients to continue working without migrating to KMIP.