• Not 100% sure about 2005 but I know that for 2008 you apply the update to the passive node, failover and then apply the update to the "new" passive node.