Recently I have been working with (gasp!) SuperMicro servers, and their IPMI implementation.  Upon testing and review I have concluded that my only secure course of action with regard to the SM implementation is to completely disable it.  It is just too fat of a target, and too easy to break. 

So what about Dell's iDRAC?  How secure is this system anyway.  Is there a white paper narrowly focused on the security of this system?