What's the best way to proceed to upgrade a production HA iSCSI failover cluster running B5845?

We can't take the iSCSI targets down...

Do we upgrade the secondary unit first, manually failover to it once it's running again, and then upgrade the primary?