We did something similar some months ago, I’ve written about our experience in this thread.
The hardest gotcha for us was that instance admins had to approve the update, meaning that the old system could not be switched off after ~48h hours as initially planned. Instead we waited for weeks and then wrote the last 2-3 remaining customers individual e-mails asking them to click the update button. Ugly thing.
All the best for your update!