We update our servers monthly to keep current with the Microsoft critical updates. Are there specific procedures to apply MS Updates to the PassagePoint server? Is there a good time for the application to be down for 1/2 hour?

It really depends on your business rules and when you can reboot without disrupting your users. Generally on reboot, Microsoft gracefully shuts down the services, so no need to manually shutdown the server.