Most of them are just different names for the same products. IBM GKLM (Guardium Key Lifecycle Manager) is the latest name for what was once known as TKLM, SKLM. I believe ISKLM is the z/OS version of the product. https://community.ibm.com/community/user/security/discussion/what-is-ibm-gklm-are-gklm-and-sklm-different
I believe EKMF (Enterprise Key Management Facility) has been renamed to UKO (Universal Key Orchestrator): https://www.ibm.com/products/unified-key-orchestrator-for-zos As far as I know, GKLM/SKLM/TKLM is geared towards managing and serving keys for data at rest encryption in storage systems, though the list of supported devices includes other clients. https://www.ibm.com/support/pages/ibm-security-guardium-key-lifecycle-manager-supported-storage-and-non-storage-devices EKMF, EKMFWeb, UKO is geared towards managing and serving operational keys. https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-uko ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN