Phone has three different modes for testing/repairing phone. Modes can be selected with
suitable resistors connected to BSI- and BTEMP- lines as following:
Table 1: Mode selection resistors
ModeBSI- resistorBTEMP- resistorRemarks
Normal68k47k
Local560_ (<1k_)What ever
Test3.3k (> 1k)560_ (<1k_)Recommended with baseband testing. Same as
local mode, but making a phone call is possible.
The MCU software enters automatically to local or test mode at start-up if corresponding resistors are connected.
Note! Baseband doesn't wake up automatically when the battery voltage is connected
(normal mode). Power can be switched on by
•Pressing the power key
•connecting a charger
•RC-alarm function
In the local and test mode the baseband can be controlled through MBUS or FBUS (FBUS
is recommended) connections by a Phoenix service software.
Issue 1 11/02ãNokia CorporationPage 5
RH-13
VR6
VR4
VR2
VR7
VR3
VR1B
VR1A
V
E
V
H
V
H
VANA
VIO
VR5
TroubleshootingCCS Technical Documentation
Measurement points
Figure 1: UEM regulator's filter capacitors
COR
FLAS
FLAS
UEM
VSIM
Page 6ãNokia CorporationIssue 1 11/02
RH-13
UEMINT
PURX
DbusCLK
FbusRX
Dbu
sENX
MbusRX
MbusTX
UEM
FLASH
UPP
CCS Technical DocumentationTroubleshooting
Figure 2: BB testpoints
RFCLK:
Init clk
19.22MHz
GSM 13MHz
Issue 1 11/02ãNokia CorporationPage 7
RH-13
TroubleshootingCCS Technical Documentation
Baseband Troubleshooting
Note: ESN and IMEI has to re-written to phone If UEM is replaced. This can be
done only in Central Service.
The Baseband Troubleshooting instructions consists of the following topics:
•Power up
•Flash programming
•Audio
•Earpiece
•Microphone
•Charging
•Accessory detection
•Data cable
•Sleep clock
•User interface
•Display
•Lights
•Buzzer
•Vibra
•Keyboard
•Infra red
•Power up faults
Power up sequence
UEM acts as a HW master during start up
•Vbatt limits: 2.1V for internal state machine, 3V triggering whole startup
•These regulators are supplying the processors, memory, chip interfaces and
clock source in RF
•Reset releasing delay
•Supply voltages stabilize to their UEM hw default values
•RFCLK grows to full swing
•Core is ready to run but waiting for PURX release
•Reset releasing
•UPP releases the SLEEPX up to "non sleep" -state to prevent the UEM switching
the regulators "OFF"
MCU starts running the Bootstrap Code
•written in stone/ UPP internal ROM
•the program checks if there exists any reason for FDL mode (Flash Down Load)
•If there exists executable code in FLASH and there exists no reason for FDL, the
MCU starts running the MCU program from FLASH.
MCU runs the FLASH MCU code
•the phone initialization, user interfaces, internal blocks etc
•Core regulator voltage setting for required DSP speed
•Initializes the DSP and concerning hw
•Releases DSP reset -> DSP starts running
Note: In the figure below RF_Clk frequency appears to be lower than 19.2MHz
because of too low oscilloscope sampling frequency (2kS/s).
Issue 1 11/02ãNokia CorporationPage 9
RH-13
TroubleshootingCCS Technical Documentation
Figure 3: Power up sequence
1Power key pressed
•After 20ms UEM enters RESET MODE if VBAT>Vmstr+
22) VFLASH1, Vana, Vcore, Vio and VR3 goes high.
•VCTCXO enabled by VR3 -> RFClk 19.2 MHz running.
3Purx released
•Purx released by UEM, UEMINT goes high for 100 ms and about
500ms RFCLK will change 13MHz (GSM mode), SleepX goes high and
UEM startsfeeding SleepClk (32 KHz) to UPP. NOTE! Sleepclock starts
running in crystal circuitry (B200) immediately when battery voltage is
supplied.
4Software running
•Default value for Vcore is 1.5 volts and if software is running Vcore will
rise to 1.8 volts.
•Cbus (1.00MHz/GSM and 1.08MHz/TDMA) clock starts running.
Page 10ãNokia CorporationIssue 1 11/02
RH-13
CCS Technical DocumentationTroubleshooting
Phone does not start up normally or does not stay on
Note! In case of power up faults, it's not possible to force phone on by disabling watchdog. Instead, measurements should be done immediately when power key pressed or
when battery voltage connected to phone (local/test mode).
The easist way to check if software is running when phone takes abnormal amount of
current is to measure cbusclk and Vcore.
Dbus clock (programmable 9.72MHz TDMA, 13MHz GSM) is not automatically visible on
test and local mode.
Issue 1 11/02ãNokia CorporationPage 11
RH-13
TroubleshootingCCS Technical Documentation
Figure 4: Fault tree, phone does not power up
OK
Check 13MHz /GSM
or 19.44/TDMA
RF-clock from C420
OK
Tryto start phone to
testor local mode
FAIL
Measure
Vflash1,Vana,Vio,Vcore
,VR3 when pwrkey
pressed
VR3
missing
Check G801
(missing,
misaligned)
FAIL
Check
C420
OK
Check 19.2MHz
from G801
OK
FAIL
OK
FAIL
R816,C867,C8
66, R817, C868
OK
Check
Check the
powerkey
OK
Check R202,
R203, R205,
C217, C220
OK
Check
X101,C108,
C109,Z101
FAIL
Measure VBAT
from C262
OK
OK
troubleshooting
Check that purx
goes up to 1.8V
OK
Measure J406.
1.08
MHz/TDMA
and
1.00MHz/GSM
OK
Change UPP
(D400)
FAIL
FAIL
Re-flash phone
Programmng ok,
but phone doesn't
start
Flash Programming does not work
See RF
Change
G801
Change the
UEM (D200)
Programming
fails
Go to flash failure
chart
Flash programming procedure
•Phone communicates with prommer via production test pattern, using signals:
Page 12ãNokia CorporationIssue 1 11/02
RH-13
CCS Technical DocumentationTroubleshooting
•FBUSTX(serial data to phone),
•FBUSRX(serial data from phone),
•MBUS(serial clock for FBUSRX)
•VPP(External flashing voltage for speed up flashing)
•Also BSI line is used when initializing flashing (battery connector)
•When phone is powered (VBAT>3V ) MBUS and FBUSTX lines are pulled up internally by phone.
•Prommer sends command to UEM, using FBUSRX, to enter Flash-mode. During
the sending of this command prommer keeps BSI line high and MBUS is used as a
serial clock.
•When Flash-mode command is acknowledged UEM enters Flash-mode and
releases reset (PURX) to MCU.
•After reset is released UPP checks if there is a request for Bootstrap code (that
resides in UPP ROM).
•Request for Bootstrap is MBUS pulled down by Prommer. (If bootstrap is not
requested, bootstrap code jumps to FLASH SW.)
•If Bootstrap code is requested UPP enters Flash-mode and sets FbusTX to '0' as
acknowledgement to prommer. This is an indication that UPP can run, at least,
the fixed Bootstrap code – although not able to run FLASH code. UPP then sends
an UPP-ID to prommer via FBUSTX line.
•After prommer has received UPP-ID it sends corresponding Secondary Boot Code
to phone via FBUSRX. Secondary Boot Code, when run in UPP, requests UPP to
send information to prommer about flash type and other HW related parameters
about the device to be flashed.
•Prommer then sends the Algorithm Code
and this algorithm, when run in UPP, takes over handling the MCUSW transfer to
Flash.
corresponding to the HW parameters
•12 volts can be supplied to Vpp (by prommer) to speedup flashing.
•FLASH Program includes a package of MCU and DSP software and all default
parameters for the phone. The tuning values will be added/rewritten during
Flash/Alignment phase.
Issue 1 11/02ãNokia CorporationPage 13
RH-13
TroubleshootingCCS Technical Documentation
Flash programming error codes
Error codes can be seen from "FPS-8 Flash" in Phoenix.
Underlined note means that item under consideration is being used first time in flashing
sequence.
Table 2: Flash programming error codes
ErrorDescriptionNot working properly
C101"The Phone does not set FbusTx line high after the
startup."
C102"The Phone does not set FbusTx line low after the
line has been high. The Prommer generates this
error also when the Phone is not connected to the
Prommer."
C103"Boot serial line fail."Mbus from Prommer->UEM-
C104"MCU ID message sending failed in the Phone."FbusTx from UPP->UEM->Prommer
C105"The Phone has not received Secondary boot codes
length bytes correctly."
C106"The Phone has not received Secondary code bytes
correctly."
Vbatt
Vflash1
Vcore
VIO
BSI and FbusRX from prommer to UEM.
FbusTx from UPP->UEM->Prommer(SA0)
PURX(also to Safari)
VR3
Rfclock(VCTCXO->Safari->UPP)
Mbus from Prommer->UEM>UPP(MbusRx)(SA1)
FbusTx from UPP->UEM->Prommer(SA1)
>UPP(MbusRx)(SA0)
FbusRx from Prommer->UEM->UPP
FbusTx from UPP->UEM->Prommer
Mbus from Prommer->UEM->UPP(MbusRx)
FbusRx from Prommer->UEM->UPP
FbusTx from UPP->UEM->Prommer
Mbus from Prommer->UEM->UPP(MbusRx)
FbusRx from Prommer->UEM->UPP
FbusTx from UPP->UEM->Prommer
C107"The Phone MCU can not start Secondary code cor-
rectly."
A204" The flash manufacturer and device IDs in the
existing Algorithm files do not match with the IDs
received from the target phone."
A387"The MCU ID in the MCUSWUPP
C601"The prommer has detected that Vpp voltage level
has dropped below the limit"
C383
C583
C683
"The Prommer has not received Phone acknowledge
to the message."
(C383-during algorithm download to target phone)
(C583-during erasing)
(C683-during programming)
UPP
Flash
Signals between UPP-Flash
Vpp from prommer - >Flash
Flash
UPP
Signals between UPP-Flash
Page 14ãNokia CorporationIssue 1 11/02
RH-13
CCS Technical DocumentationTroubleshooting
C384
C584
C684
C585
C685
C586
C686
"The Phone has generated NAK signal during data
block transfer."
(C384-during algorithm download to target phone)
(C584-during erasing)
(C684-during programming)
Data block handling timeout"
(C585-during erasing)
(C685-during programming)
"The status response from the Phone informs about
fail."
(C586-during erasing)
(C686-during programming)
Flash
UPP
Signals between UPP-Flash
Flash
UPP
Signals between UPP-Flash
Flash
Issue 1 11/02ãNokia CorporationPage 15
RH-13
TroubleshootingCCS Technical Documentation
Charging
Note: Charging voltage and current can be checked by connecting phone to service
software and reading ad- converter values of vchar and ichar.
Figure 5: Fault tree, charging
Phone doesn't start
charging
Connectchargerand
check VCHARIN,
check CHRG_CTRL
if used ACP-9,
LCH-8, LCH-9,
DCH-12, HFU-2
Fail
F100,L100,V100,C105
Check
, R107,C107
OK
Check ICHAR
FAIL
Check
R202,R203,R205,C217,
C220,C201,C202 and
R200
OK
Changethe
UEM
OK
Check bottom
connector
-VIN
- CHRG_CTRL
Audio failures
In case of audio failures there are three possibilities to check audio lines.
1Make a phone call against tester and check audios.
2In case of earpiece/XMIC fail: Feed 1Khz signal to XMIC line and measure signal
from earpiece line. Audio test box JBA-8 is needed. Audio loop (Audio test/Ext In Hp Out) must be switched on by Phoenix service software. This loop will connect
audios only through UEM. In this case UPP is not used.
Page 16ãNokia CorporationIssue 1 11/02
RH-13
CCS Technical DocumentationTroubleshooting
3In case of internal microphone/XEAR fail: Feed tone to microphone and measure
signal from XEAR line. Audio test box JBA-8 is needed. Audio loop (Audio test/Hp In Ext Out) must be switched on by Phoenix service software. This loop will connect audios only through UEM. In this case UPP is not used.
4Run audio- loop selftest with Phoenix (BB Self tests/ST_EAR_DATA_LOOP_TEST).
This loop will test the eardata/micdata lines between UPP and UEM.
Issue 1 11/02ãNokia CorporationPage 17
RH-13
TroubleshootingCCS Technical Documentation
Earpiece or external microphone line does not work