First, carry out a thorough visual check of the module. Make sure that:
• there are no mechanical damages
• the solder joints are OK
Note: Before changing anything, ALL SUPPLY VOLTAGES AND THE SYSTEM CLOCK / SLEEP
CLOCK should be checked.
Baseband Troubleshooting
General testing
The phone has three different modes for testing and/or repairing the phone. The modes
can be selected with suitable resistors connected to BSI- and BTEMP- lines as illustrated
in the following table:
ModeBSI-resistorBTEMP resistorRemarks
Local mode0 - 1k0 - 1k
Test mode>1k0 - 1k
Normal mode68k47kRecommended for baseband
testing. Same as local mode, but
making a phone call is possible.
If the corresponding resistors are connected, the MCU software automatically enters into
the local or test mode when the supply voltage is connected to the phone.
The power can be switched on by:
1Pressing the power key.
2Connecting the local/test mode resistors to the bsi/btemp lines and connecting
the battery voltage to the phone.
3Connecting a charger.
4Phone’s internal functions (Real time clock alarm)
In the local and test mode, the baseband can be controlled through MBUS or FBUS (FBUS
is recommended) connections using Phoenix service software.
Troubleshooting
Note: Most of the baseband repair actions require removing the baseband shield. The shield must not
be removed unless separately authorized by the program.
Note: The phone’s ESN has to re-written to the UEM, if the UEM is replaced. This can be done only in
Central Service.
• VCTCXO enabled by VR3 -> RFClk 19.44 MHz running.
2Purx released
• Purx released by UEM, UEMINT goes high for 100 ms, SleepX goes high and
UEM starts feeding SleepClk (32 KHz) to UPP.
Note: The sleepclock starts running in the crystal circuitry (B200) immediately when the battery voltage is supplied.
3Software running
• Default value for Vcore is 1.5 volts when the software is running.
• Cbus (1.08MHz) clock starts running.
Phone does not start up normally or does not stay on
Note: In case of power up faults, it is not possible to force the phone on by disabling the watchdog.
Instead, measurements should be taken immediately when the power key is pressed or when the battery voltage is connected to the phone (local/test mode).
The easiest way to check if the software is running when the phone takes an abnormal
amount of current is to measure the cbusclk and Vcore.
The Dbus clock (programmable 9.72MHz) is not automatically visible in the test and local
modes.
1The phone communicates with the prommer via the production test pattern,
using the following signals:
• FBUSTX(serial data to phone)
• FBUSRX(serial data from phone)
• MBUS(serial clock for FBUSRX)
• VPP(External flashing voltage for speed up flashing)
The BSI line is also used when initializing flashing (battery connector).
2When the phone is powered (VBAT>3V), the MBUS and FBUSTX lines are pulled
up internally by the phone.
3The prommer sends a command to the UEM, using FBUSRX, to enter the Flash
mode. During the sending of this command, the prommer keeps the BSI line high
and MBUS is used as a serial clock.
4When the Flash mode command is acknowledged, UEM enters the Flash mode
and releases reset (PURX) to MCU.
5After reset is released, UPP checks if there is a request for the Bootstrap code
(that resides in the UPP ROM).
6The request for Bootstrap is the MBUS pulled down by the prommer (if the boot-
strap is not requested, the bootstrap code jumps to FLASH SW).
7If the Bootstrap code is requested, UPP enters the Flash mode and sets FbusTX to
'0' as an acknowledgement to the prommer. This is an indication that UPP can
run, at least, the fixed Bootstrap code – although it is not able to run the FLASH
code. UPP then sends an UPP-ID to the prommer via the FBUSTX line.
8After the prommer has received the UPP ID, it sends a corresponding Secondary
Boot Code to the phone via FBUSRX. The Secondary Boot Code, when run in UPP,
requests UPP to send information to the prommer about the flash type and other
HW-related parameters about the device to be flashed.
9Prommer then sends the Algorithm Code corresponding to the HW parameters,
and this algorithm, when run in UPP, takes over handling the MCUSW transfer to
Flash.
10 12 volts can be supplied to Vpp (by the prommer) to speed up flashing.
Note: The charging voltage and current can be checked by connecting the phone to the service software and reading the ad- converter values of the vchar and ichar.
"The Prommer has not received Phone
acknowledge to the message."
(C383-during algorithm download to target
phone)
(C583-during erasing)
(C683-during programming)
"The Phone has generated NAK signal during
data block transfer."
(C384-during algorithm download to target
phone)
(C584-during erasing)
(C684-during programming)
Data block handling timeout"
(C585-during erasing)
(C685-during programming)
"The status response from the Phone informs
about fail."
(C586-during erasing)
(C686-during programming)
Flash
UPP
Signals between UPP-Flash
Flash
UPP
Signals between UPP-Flash
Flash
UPP
Signals between UPP-Flash
Flash
If charging fails when the LCH-9 is used, and works with ACP-7 and ACP-8, check that
the charge control pin of the system connector is connected to the ground.
In case of audio failures, there are three possibilities to check the audio lines.
1Make a phone call against tester and check audios.
2In case the earpiece/XMIC fails: Feed a 1 Khz signal to the XMIC line and measure
the signal from the earpiece line. The Audio test box (JBA-8) is needed. The Audio
loop (Audio test/Ext In Hp Out) must be switched on by the Phoenix service software. This loop will connect audios only through the UEM. In this case, the UPP is
not used.
In case the internal microphone/XEAR fails: Feed the tone to the microphone and measure the signal from the XEAR line. The Audio test box (JBA-8) is needed. The Audio loop
(Audio test/Hp In Ext Out) must be switched on by the Phoenix service software. This loop
will connect audios only through the UEM. In this case, the UPP is not used.
3Run the audio-loop self-test with Phoenix (BB Self Tests/
ST_EAR_DATA_LOOP_TEST). This loop will test the ear-data/mic-data lines
between the UPP and the UEM.
Earpiece or external microphone line does not work
• No sound: Try using a known good buzzer instead. If there is still no sound, change the
UEM (D200)
• Weak sound: Use the Audio test in Phoenix to set the buzzer parameters (frequency,
strength). If it does not affect the sound level, change the buzzer.
Keyboard does not work
Check that there is no dirt between the dome sheet and the PWB. Check EMI/ESD filter
(Z301) that all lines come through. If not, change Z301. If the keyboard still does not
operate normally, try to use the Keyboard test in Phoenix to see if the pressed key is
identified. If it is not identified, change the UPP (D400).
Receiver Troubleshooting
General instructions for RX troubleshooting
Start the Phoenix software and use it to start the required RX mode of the mobile phone.
The troubleshooting flowchart is divided into three steps: (1) general checking, (2) local
checking, and (3) RX chain checking.
Note: Before changing ASICs or filters, all solderings and missing components must be checked visually. After any possible component changes, the phone must be tuned with the Phoenix autotune SW.
Path of the received signal
Block level description of the receiver:
(Antenna/ext RF) – Diplexer – Duplexer – Low Noise Amplifier (LNA) – RX band filter –
First mixer – 135.54 MHz RX IF filter – IF-amplifier – second mixer – 14 kHz low-pass filter – adjustable IQ amplifier – Baseband.
Since the same physical signal path is used for both analog and digital modes at the
lower band, there is no need for additional troubleshooting in the digital mode. So if the
digital mode at the lower band is not working properly, start the analog mode troubleshooting.
TDMA1900 (dual band)
Only EXT RF connector -> 1st IF needs separate troubleshooting at upper band. After
down conversion (RF -> 135.54 MHz) both lower and upper band use same signal path.
Always use an RF cable connected from an external RF connector to the analyzer via (rfpower) attennuator. This is important to protect the analyzer against excessive RF power
and not to allow leakage of undesired RF power into the cellular frequencies.
1Start the Phoenix software and select the TX mode under Testing (AMPS,
DAMPS).
2It is useful to select the mid channel (383 for AMPS/DAMPS) and the power
level 2.
Note: After any component change, tune the phone with the Phoenix autotune SW.
Basically, the power detection is done with the Power detector module and power control is done inside the Taco. Power detection is basically similar for both bands, except
that both bands have their own coupler.
Is PWRDET vs output
power OK?
See chart below.
Y
Is DAC value vs.
PWRDET (mV) OK?
N
N
Figure 14: Fault tree: Power control loop
Check VR2 and
RFTEMP. Check
C930, C931, and
PWRDET module.
Check UEM
(baseband)
Note! See PWRDET vs
Output power curve
The detected voltages are illustrated in the following table and diagram:
800A800D1900D
PoutTXPWRDETPoutTXPWRDETPoutTXPWRDET
PLdBmdacmVdBmdacMvdBmdacmV
224.8712 198427.3779220127.37021980
321.6512143723.3476131223.34311198
418.534096119.328475919.3262730
514.523968615.317146215.3158445
610.518051011.39827111.388253
76.51414157.3561517.350148
8---3.330843.32679
9----0.71446-0.71444
§0----4.75 16 -4.76 20
Note: DAC values may vary about +- 20%
Note: TXPWRDET is the difference between TX on burst and off burst.
There are four oscillators generating the needed frequencies for RF section: 19.44 MHz
VCTCXO is used as a reference signal oscillator reference oscillator, 2 GHz UHF VCO with
loop filter circuit is used for RX and TX channel selection, TX VHF and RF VHF are for TX
modulator, and 2nd RX mixer locals generation.
The VHF synthesizers are integrated in Taco, but have external VCO coils and loop filters.
RX VHF frequency is fixed 271.08 MHz and TX VHF is fixed to 271.08 MHz . All locals are
locked to stable 19.44 MHz reference oscillator.
The frequency range for 2 GHz UHF VCO is: 2009.1 MHz … 2125.53 MHz. The output frequency range for the lower band is from 2009.16 MHz to 2059.02 MHz. In upper band,
the output frequency range from the UHF VCO is from 2031.78 MHz to 2125.53 MHz.
It is practical way to check out synthesizer status by measuring control voltage of the
VCO from Integrator capacitor. If voltage is stable and reasonable, local oscillators are
running correctly.
19.44 MHz reference oscillator
The VCTCXO oscillator frequency (G790) is controlled by UEM. This output 19.44 MHz
signal is connected to Taco. It is used as a reference signal in Taco and also fed out as
buffered clock signal to UPP. All synthesizers use divided 19.44 MHz signal as a reference
signal for Phase locked loop to provide correct LO frequency.
The RX VHF signal is used to generate receiver Intermediate frequency. RX VHF has one
fixed frequency 271.08 MHz. Operating frequency is locked in Phase locked Loop.
RX VHF PLL output signal is integrated in Taco. There are only four external components:
VCO coil (L730), and loop filter components C740, C741, and R741.
The TX VHF signal is used to generate transmitter Intermediate frequency. TX VHF VCO
has one fixed frequency (361.08). Operating frequency is locked in Phase locked loop. TX
VHF VCO output signal is divided by 2 and fed to the modulator.
The UHF VCO signal is used for RF channel selection. This signal is fed as a local signal for
1st mixer of RX path and for upconverter of TX path. When operating on lower band the
VCO signal is divided by 2 before feeding. This synthesizer is used for channel selection in
all modes and both bands.
The UHF synthesizer consists of an external 2GHz VCO module with loop filter components and integrated PLL parts in Taco. Integrated charge pump circuit allows analog and
digital operation modes. The VCO Oscillation frequency is from 2009.1 MHz to
2125.53 MHz. The output frequency of the VCO module depends on the DC control voltage which is controlled by PLL circuit inside Taco.