Use 'smpatch update' to patch most things, then sometimes you'll need to go to the console, drop into single user mode, do a 'smpatch add -x idlist=/var/sadm/spool/disallowed_patch_list' and reboot. There's also a way to use pprosetup to configure PatchPro to work as an automatically scheduled service much like Windows Update. I didn't explore that part yet. I'll probably just use a cronjob for now.

Patches are downloaded as jar (zip) files in /var/sadm/spool. Some patches, like kernel patches don't seem to work write in smpatch, maybe I was just impatient. So, you can install patches the old fashioned way with patchadd by unzipping the jar file and adding the patch manually.