CCS Technical Documentation
RH-27 Series Transceivers
Issue 1 11/2003 Confidential
©
2003
Nokia Corporation
Troubleshooting - Baseband
Страница 1: ...CCS Technical Documentation RH 27 Series Transceivers Issue 1 11 2003 Confidential 2003 Nokia Corporation Troubleshooting Baseband ...
Страница 2: ...pCLK Analog 14 Flash Programming 15 Connections to Baseband 15 Baseband Power Up 15 Flash Programming Indication 15 Flashing 16 Charging Operation 17 Battery 17 Charging circuitry 18 Charger Detection 19 Charge Control 20 Audio 20 Display and Keyboard 21 Camera 21 Introduction 21 DC Measurements 22 AC Measurements 23 Timing measurements 23 Power up Timing 24 UIF Interface Timing Measurements 25 FM...
Страница 3: ...ential 2003 Nokia Corporation Page 3 Phone is jammed 45 Power doesn t stay on or the phone is jammed 46 Charger faults 47 Audio faults 48 Earpiece 48 Microphone 49 Vibra 50 Display faults 51 Keypad faults 53 Power key 53 UI modules 54 FM Radio 55 Camera 57 GPS Module 57 Overview 57 ...
Страница 4: ... called sleep mode This sleep mode shuts off the VCTCXO which is used as system clock source for both RF and Baseband During the sleep mode the system runs from a 32 kHz crystal The phone awakes by a timer running from this 32 kHz clock The sleep time is determined by net work parameters Sleep mode is entered when both the MCU and the DSP are in standby mode and the 19 2MHz Clk VCTCXO is switched ...
Страница 5: ...Batman Core UPP Charger Battery DC DC LCD Key VCTCXO 19 2 MHz IR Sleep Clk 32 KHz CBus DBus MBus ExtBusC FBus MBus RF Bus VBatt VIO Vflash1 Vflash2 VR2 UEM VR1B VR6 VR5 VR1A VR4 VR3 VR7 VPP PRODTP VANA PA VBatt Front End VBatt UHF SYNTH FBusRx Figure 1 Lancelot Power Distribution FBusTx FM Radio SIM Reader GPS BB_RF Camera VSIM GenIO Control ...
Страница 6: ...led Then 500us later VR3 VANA VIO and VCORE are enabled Finally the PURX Power Up Reset line is held low for 20 ms This reset PURX is fed to the baseband ASIC UPP resets are generated for the MCU and the DSP During this reset phase the UEM forces the VCTCXO regulator on regardless of the status of the sleep control input signal to the UEM The FLSRSTx from the ASIC is used to reset the flash during...
Страница 7: ...shooting Baseband RH 27 Issue 1 11 2003 Confidential 2003 Nokia Corporation Page 7 Reference signal PwrOnX Charger Detection RTC UEMRSTX VFlash1 VIO VCORE VANA VR3 19 2MHz Clk PURX t1 t2 t4 t3 32kHz XTAL t1 20ms t2 200ms t3 500us t4 20ms ...
Страница 8: ...on state and continues with the SW initialization of the baseband If the power on key does not indicate a valid power on situation the MCU powers off the baseband Power up when charger is connected In order to be able to detect and start charging in the case where the main battery is fully discharged empty and hence UEM has no supply NO_SUPPLY or BACKUP mode of UEM charging is controlled by START ...
Страница 9: ...BAT is supplied to UEM BUZZER VIBRA LED PA and PA drivers Tomcat and Hornet During this mode the current consumption on this mode is approximately 35uA This is the UEM leakage current In sleep mode both processors MCU and DSP are in stand by mode Phone will go to sleep mode only when by both processors made this request When SLEEPX signal is detected low by the UEM the phone enters SLEEP mode VIO ...
Страница 10: ...ture size and charging current are measured by the UEM and the EM charging algorithm controls it The charging control circuitry CHACON inside the UEM controls the charging current delivered from the charger to the battery The battery voltage rise is limited by turning the UEM switch off when the battery voltage has reached 4 2 V Charging current is monitored by measuring the voltage drop across a ...
Страница 11: ...tput voltage selectable 1 0V 1 3V 1 5V 1 8V Default power at power up is 1 5V VIO 150 1 8 Enabled always except during power off mode VFLASH1 70 2 78 Enabled always except during power off mode VFLASH2 40 2 78 Enabled only when data cable is connected VANA 80 2 78 Enabled only when the system is awake off during sleep and power off modes VSIM 25 3 0 Not used on Columbia platform Table 2 RH 27 RF R...
Страница 12: ...mentation Page 12 2003 Nokia Corporation Confidential Issue 1 11 2003 RFConvClk 19 2 MHz digital The UPP distributes the 19 2 MHz Clk to the internal processors the DSP and MCU where SW multiplies this clock by seven for the DSP and by two for the MCU ...
Страница 13: ...for CBUS which is used by the MCU to transfer data between UEM and UPP DBUS Clk Interface A 9 6 MHz clock signal is used for DBUS which is used by the DSP to transfer data between UEM and UPP The system clock can stopped during sleep mode by disabling the VCTCXO power supply from the UEM regulator output VR3 by turning off the controlled output signal SleepX from UPP ...
Страница 14: ...3 SleepCLK Digital The UEM provides a 32kHz sleep clock for internal use and to UPP where it is used for the sleep mode timing SleepCLK Analog When the system enters sleep mode or power off mode the external 32KHz crystal pro vides a reference to the UEM RTC circuit to turn on the phone during power off or sleep mode ...
Страница 15: ...sequence The MBUS signal from UEM to the external connection is used as clock during flash programming This means that flash programming clock is supplied to UPP on the MBUSRX signal The flash prommer indicates the UEM that flash programming reprogramming by writing an 8 bit password to the UEM The data is transmitted on the FBUSRX line and the UEM clocks the data on the FBUSRX line into a shift r...
Страница 16: ...mmer will first set BSI to 1 and then uses FBUSRX for writing and MBUS for clocking After that BSI is set back to 0 MCU will indicate to prommer that it has been noticed by using FBUSTX signal After this it reports UPP type ID and is ready to receive secondary boot code to its internal SRAM Figure 1 Flashing start This boot code asks MCU to report prommer phone s configuration information includ i...
Страница 17: ... low MCU indicates that prommer has been noticed Ch4 FBUS_RX Figure 3 Flashing continued 2 Charging Operation Battery In RH 27 a Lithium Ion cell battery BLD 3 is used Reading a resistor inside the battery CH1 PURX CH2 MBUS CH3 FBUSTX CH4 FBUSRX Measure points Production test pattern J396 FLASH_2 CH1 PURX CH2 MBUS CH3 FBUSTX CH4 FBUSRX Measure points Production test pattern J396 FLASH_3 Data trans...
Страница 18: ... in the phone Figure 4 BLD 3 battery pack pin order Figure 5 Interconnection diagram inside the battery pack Charging circuitry The UEM ASIC controls charging depending on the charger being used and the battery size External components are needed for EMC reverse polarity and transient protection of the input to the baseband module The charger connection is through the system con nector interface T...
Страница 19: ... the presence of the charger for the SW The charger identification acceptance is controlled by EM SW The charger recognition is initiated when the EM SW receives a charger connected interrupt The algorithm basically consists of the following three steps 1 Check that the charger output voltage and current is within safety limits 2 Identify the charger as a two wire or three wire charger 3 Check tha...
Страница 20: ...er voltage has decreased below VBATLim charging re starts There are two PWM frequencies in use depending on the type of the charger two wire charger uses a 1Hz and a three wire charger uses a 32Hz Duty cycle range is 0 to 100 Maximum charging current is limited to 1 2 A Figure 8 Charging circuit at battery Audio The audio control and processing in RH 27 is supported by UEM which contains the audio...
Страница 21: ...te inputs at UEM Inputs for the microphone signals are differen tial type Also MICB1 is used for MIC1 and MICB2 is used for MIC2 and MIC3 Universal Headset Display and Keyboard LEDs are used for LCD and keypad illumination in RH 27 There are three LEDs for the LCD and eight LEDs for the keypad The signal use to drive the LED driver for the LCD and keyboard is KLIGHT Color LCD is used in RH 27 Inte...
Страница 22: ...ine VANA Vflash2 2 79 2 7 2 78 2 9 V Analogue supply VDIG 1 79 1 7 1 8 1 9 V Digital supply GND 0 0 System GND Table 4 DC characteristics Signal name Measured value V Min Typical Max Unit Description CSX H 1 80 L 2 0m H 0 7xVIO L 0 H VIO L 0 3xVIO V Camera chip select active low DaClk H 1 77 L 18m H 0 7xVIO L 0 H VIO L 0 3xVIO V Voltage levels EXTCLK Camel Dune Camera Module Hardware Accelerator C...
Страница 23: ...be received is D C bit which indi cates to the camera the status of following 8 bit data In the case of command data to camera the D C bit is low 0 The camera must not react to received data if D C bit is high 1 TxDa data length is 8 bits TxEnd bit The first bit to be transmitted is the TxEnd bit TxDa H 1 75 L 18m H 0 8xVIO L 0 H VIO L 0 2xVIO V Data to transmit camera interrupt active low RxDa H ...
Страница 24: ...xternal system clock for the camera module The clock may be AC or DC cou pled Four fixed frequencies are available 8 4 9 6 9 72 13 and 16 8 MHz each within 100kHz VIO is a regulated 1 8V nominal I O logic supply for the camera module VCtrl is a control signal to place the camera and HWA in their lowest power consumption modes It must be permissible to pull this signal up if this functionality is n...
Страница 25: ...1 Timing diagram of DaClk and RxDa signals Figure 12 Timing diagram of DaClk and TxDa signals Figure 13 Timing diagram of CSX and DaClk signals t3 134us 1 3v 120us Determined by external RC t4 119 5us 1 3v 100us t5 3 75ms 5ms Software dependent t6 N A 0 SSDA and SSCL signals not used t7 N A 8ms SSDA and SSCL signals not used Table 6 Power up timing Parameter Measured value Limit Notes RxDa Tdis Td...
Страница 26: ...le Parameter Measured value Min time Max time RxDa data set up time Tdis 100ns 25ns RxDa data hold time Tdih 103 6ns 25ns CSX valid to DaClk high Tcss 106ns DaClk cycle time 2 DaClk high to CSX invalid Tcsh 209ns DaClk cycle time Camera interrupt TxDa pin Tint 204ns 1 x ExtClk cycle Output delay time C 30pF Tod 8 3ns 20ns Table 8 Rise and fall times of serial interface for camera module Parameter ...
Страница 27: ...t flag bit is set to high Also the Found Flag is set to high in this case While WRITE Read is LOW data can be read by the UPP At the rising edge of the BUS Clock data will be shifted out of the register This data is available from the point where the bus clock is HIGH until the next rising edge of the clock occurs Table 9 FM radio interface timing FM radio signal Min Nom Max Condition Note FMWrEn ...
Страница 28: ... UHJ port to control the FM radio by using Phoenix But if you connect a headset such as HDS 3 to Tomahawk connector then you can t control the phone because you ve already occupied the connection port Tomahawk so in this case you have to have jumper wires on pro duction test points Fbus Tx RX GND Input signals to FM radio After connecting a headset to UHJ port to control the phone through Phoenix ...
Страница 29: ...Technical Documentation Troubleshooting Baseband RH 27 Issue 1 11 2003 Confidential 2003 Nokia Corporation Page 29 FM Radio signals before Radio on Ch1 FMClk 32 768KHz Ch2 FMWrEn Ch3 FMctrlClk Ch4 FMctrlDA ...
Страница 30: ...essory RH 27 is designed to support Tomahawk and Universal Headset accessories differential and single ended respectively Detection of Tomahawk accessories is done through the ACI signal where the Universal Headset is detected on GenIO 21 The following picture shows the pin out of the Tomahawk connector The pin out on the Tomahawk connector is as follows ...
Страница 31: ...interface for mono and stereo outputs These modes are explained in the following sections Charging Charging through the Tomahawk is done same way as through the charger connector Pin 1 of the Tomahawk is physically connected the charger connector So when the phone is connected to the desktop charger such as the DCV 15 it is charged the same way as is done on the charger connector The actual chargi...
Страница 32: ... 4 we can see that PURX is release and this is when the phone operation goes from RESET mode to POWER_ON mode Tomahawk headset detection Accessory detection on Tomahawk is done digitally The pins used for accessory detection are Pin 2 Charge GND Pin 3 ACI Pin 4 Vout A waveform of such detection can be seen in the following figure ...
Страница 33: ... 11 2003 Confidential 2003 Nokia Corporation Page 33 FBus detection FBus communication in Tomahawk is done through the following lines Pin 2 Charge GND Pin 3 ACI Pin 4 Vout Pin 6 FBus Rx Pin 7 FBus Tx A waveform for such communication is shown in the following figure ...
Страница 34: ... though ACI USB and Audi on mono or stereo and FM radio communication in Tomahawk is done through the following signals A waveform showing such interface is shown in the following figure USB Audio FM Pin 5 USB Vbus Pin 9 XMic N Pin 6 USB Pin 10 SMIC P Pin 7 USB Pin 11 HSEAR N Pin 8 Data GND Pin 12 HSEAR P Pin 13 HSEAR R N Pin 14 HSEAR R P ...
Страница 35: ...ng waveform can be used to verify that sim_vcc sim_i o sim_clk and sim_rst signals are activated in the correct sequence at power up This picture can be taken when the RUIM is installed on the phone and measures the signals when the phone is turned on The following picture shows the proper waveforms when the interface is working See Bottom view diagram for the test point locations ...
Страница 36: ... 27 Troubleshooting Baseband CCS Technical Documentation Page 36 2003 Nokia Corporation Confidential Issue 1 11 2003 Figure 16 RUIM signal waveform Test Points RH 27 BB test points regulators and BB ASICs ...
Страница 37: ...CCS Technical Documentation Troubleshooting Baseband RH 27 Issue 1 11 2003 Confidential 2003 Nokia Corporation Page 37 Top view ...
Страница 38: ...RH 27 Troubleshooting Baseband CCS Technical Documentation Page 38 2003 Nokia Corporation Confidential Issue 1 11 2003 Bottom view ...
Страница 39: ...CCS Technical Documentation Troubleshooting Baseband RH 27 Issue 1 11 2003 Confidential 2003 Nokia Corporation Page 39 Camera Test Points ...
Страница 40: ...poration Confidential Issue 1 11 2003 Top troubleshooting map Top Phone totally dead Phone dead Flas h programming does n t work Phone does n t s tart up or phone is jammed Charging does n t work Flas h faults Phone is jammed Charger faults Top page 2 YE S NO YE S NO YE S NO YE S NO ...
Страница 41: ...roubleshooting Baseband RH 27 Issue 1 11 2003 Confidential 2003 Nokia Corporation Page 41 Top 2 Audio faults Dis play or LE Ds not working K eypad does n t work Audio faults Dis play faults K eypad faults E ND YE S NO YE S NO YE S ...
Страница 42: ... R202 R203 C230 Are they OK Phone is jammed Flash faults If current is zero check X100 solder and make sure Vbatt connector makes contact If current is too high check for shorts Make sure all BB regulators are at their respective voltage levels VANA VIO VCORE VFlash1 and VR3 See phone s top view diagram for test points Make sure the System Clk is 19 2MHz and that the Sleep Clk is 32KHz Make sure P...
Страница 43: ...rogramming from production pattern and test point TP03 1 8V Is it the same Reflow or change UEM Change UEM Does the phone set Flashbus TXD line low after the line has been high Flash faults page 2 YES NO YES NO NO YES Measure test point FBusTx TP05 1 8V and production pattern signal FBusTxO 2 78V during flash programming Are they the same NO Measure MBusRx 2 78V and test point TP01 1 8V Are they t...
Страница 44: ...Confidential Issue 1 11 2003 Flash faults page 2 Can you read manufacturer ID and device ID Reflow the flash Is it OK Is phone totally dead Phone doesn t start up or phone is jammed Retest Phone is dead Phone is jammed NO YES YES NO YES NO Reflow the UPP Is it OK Reflow or change flash NO NO ...
Страница 45: ... and SleepX TP10 Are they high 1 8V Measure 32kHz Clk crystal Is it OK Change B200 Reflow or change UEM Measure 19 2MHz Clk coming from VCTCXO at C502 Is it OK Check G503 C505 C520 C503 R511 R512 R518 R553 If OK change G501 Change UPP Change UEM Check VBATT VIO VCORE VFlash1 VANA VR3 capacitors Are they OK See phone top view diagram for capacitor locations Check BSI BTEMP lines and VBATT lines If ...
Страница 46: ...w or change UPP and re flash Retest YES NO YES Measure watchdog signal Cbus from test points TP15 TP08 TP05 Is it OK Reflow or change UEM and re flash Measure DBusClk 9 6MHz Data and EnX signals at TP13 TP11 TP09 Is it OK Measure FBusRx signal during phone info read from test point TP03 Is it OK Reflow or change UEM Measure FBusTx signal during phone info read from test point TP05 Is it OK Reflow ...
Страница 47: ...r faults Connect charger Make sure battery is connected Battery bar doesn t work scroll Measure voltage over V100 Is it 3 0 Vdc Read BTEMP value Is it 25C 0319 Remove fuse F100 and measure current Is it 850mA Make sure to use an ACP9 charger Retest Check X102 F100 L100 V100 C106 C110 Change UEM Change UEM Retest NO YES NO YES NO YES NO YES ...
Страница 48: ...etest Set phone in Local Mode Use Phoenix Baseband Audio Control and set the following Enable Tx Enable Rx Select MIC2 0dB Enable earpiece and enable digital loopback only Inject a 1KHz sine signal 20mVp p on XMIC Is the signal coming out of the UEM on EARP and EARN Check L102 C152 C156 C151 C154 C153 C170 R151 R155 R152 R150 and R153 If OK change the UEM Check R177 R178 and R179 If OK then change...
Страница 49: ...l Talk through the microphone Measure MICB1 voltage from MICP pads on bottom connector Is it 2 1V Is the signal going to the UEM at MIC1P and MIC1N at R172 Is the signal going out of the UEM at XEAR pin 11 12 13 and 14 on the bottom connector X101 Check connections at C175 and R170 If OK change UEM Check connections at R171 R172 R170 R173 C173 C174 C175 C170 C171 C172 If OK change microphone Check...
Страница 50: ... Measure VBATT voltage pin 1 of M300 Is it OK Check VBATT line Set phone in Local Mode Use Phoenix Message Sender and navigate as follows DEV_HOST DEV_PC PN_ACCESSORY PN_OBJ_ROUTING_REQ PN_OBJ_PC UTID_100 ACC_VIBRA_CTRL_REQ Select ACC_ON and click Send Measure the UEM signal on pin 2 of M300 Is the signal OK Change the UEM Change Vibra END NO NO YES NO YES YES ...
Страница 51: ...ll Measure VBATT voltage at R315 Is it OK Check VBATT line at X100 connector and C109 Set phone to Local Mode Use Phoenix Message Sender and navigate as follows DEV_HOST DEV_PC PN_LIGHT OBJ_ROUTING_REQ OBJ_PC UTID LIGHT_CONTROL_REQ LIGHT_CONTROL_TARGER_KBD Select LIGHT_STATE_BLINK and click Send Measure the driver signal KLIGHT at R304 Is signal OK Change UEM Check N300 L300 V300 C302 C303 C304 R3...
Страница 52: ...Mode Use Phoenix Message Sender and navigate as follows DEV_HOST DEV_PC PN_TEST OBJ_ROUTING_REQ OBJ_PC UTID TEST_UI_TEST_REQ TEST_DISPLAY_SET NUM_SB TEST_SB_UI_DISPLAY_PATTERN SB_LENGTH Select TEST_PATTERN_ALTPIXELS and click Send Check VIO and VFlash1 at X302 Also check LCD signals LCDCSX pin5 LCDCLK pin4 LCDSDA pin3 and LCDRESX pin2 at X302 Is signal OK Refer to Display section Change UPP Change...
Страница 53: ...003 Nokia Corporation Page 53 Keypad faults Power key Keypad faults Keypad faults page 2 Measure voltage at R306 Is it high Is the power key working Check S302 C310 and R306 If OK change UEM Measure voltage at R306 when power key is pressed Is it low Retest NO NO YES YES NO YES Change S302 ...
Страница 54: ...e UI modules keys working Change keypads module Is it working Measure ROW0 4 P10 P15 signals between UPP and X301 Are they 1 8V Measure COL1 4 P01 P04 signals between UPP and X302 Are they 1 8V NO Retest YES Make sure there are no shorts on Z300 If OK change UPP Change Z300 Make sure there are no shorts on Z300 If OK change UPP NO YES NO NO YES END YES ...
Страница 55: ...M2 11 Khz FM3 1 8V and FM4 32 Khz Is it OK NO Check solder on N356 X101 and replace N356 if not working NO Check VFlash2 line Change UPP D400 Check L351 L358 C367 C378 C379 C112 C113 C114 C115 If OK check Tomahawk connector X101 on pin 11 12 13 14 YES YES NO NO END Measure FMANT at L358 Is it 1 0V Does the FM radio produce a Bong sound when changing channels frequencies Check soldering under C358 ...
Страница 56: ... Page 56 2003 Nokia Corporation Confidential Issue 1 11 2003 FM Radio faults 2 Measure VREF at C365 Is it 1 6V Check C365 Change FM Radio chip N356 NO END Measure VAFL VAFR at C164 C168 Does it have an audio signal Retest YES Is FM Radio working NO YES YES NO ...
Страница 57: ...exclusively on the secondary side of the PWB underneath the display module see the following figure Camera faults Power on the phone and turn camera on by Phoenix or UI menu Make sure soldering on X970 and D970 is OK and check PUSL 1 on R997 Is it high Check VDIG voltage at C983 Check VFlash2 voltage at C981 C971 C970 NO Check D200 and replace it when D200 keeps low NO Replace N970 regulator Check...
Страница 58: ...o make sure that necessary inputs from the CE are good power clock etc Then ensure that these inputs produce the proper outputs Because of the large level of integration most functionality is contained in the two ASIC chips the amount of diag nostics one is able to do is limited Prior to performing diagnostics perform a visual inspection on the GPS circuitry to see if the problem is physical dislo...
Страница 59: ...in reset troubleshoot source in the CE GPS_EN_RESET is held high GPS_SLEEPCLK 32 768KHz OK Troubleshoot CE sleep clock circuit VRF_GPS OK VRF_GPS regulator enable line low Replace regulator N052 GPS_CLK 16 368MHz OK Replace TXCO or GPS RF ASIC Test Mode 1 OK Replace GPS BB ASIC CE sending code download signals Determine why CE not sending download signals SPI interface active Replace GPS BB ASIC R...
Страница 60: ...RH 27 Troubleshooting Baseband CCS Technical Documentation Page 60 2003 Nokia Corporation Confidential Issue 1 11 2003 ...
