Pick one system to update. migrate all service groups to the other system. Freeze the system you want to update so nothing can switch to it. If you will be rebooting it, you may want to hastop -local on the server to be updated. Make your updates. Bring the system back up, it should rejoin the cluster in "frozen" state, unfreeze it. Then perform the same routine for the second system.