© Nokia 1255_Baseband_Training / Jan 2006 / CFSCompany Confidential 1255 Technical Training...

© Nokia 1255_Baseband_Training / Jan 2006 / CFS

Company Confidential

1255 Technical TrainingBaseband Troubleshooting

Presentation

NMP-CDMA; San DiegoJan, 2006



Disclaimer

Materials current at time of publish and based upon most current R&D Documentation. Please refer to the latest product TB to determine further handset hardware variations if any.



Introduction

The mobile terminal uses a CDMA single mode engine (Cellular/ 800) with Qualcomm baseband consisting of following ASICs:

• Power Management IC,PM6610(PM) • Mobile Station Modem processor,MSM6000(MSM)• RFT6122 and RFR6122 are RF transmitter and

receiver IC• 32MB Flash memory with 8MB of pSRAM memory



Functionality Block Diagram

PM6610

Flash Memory & LCDRFR6122

RFT6122



Power Distribution Block Diagram

PM6610

VREG_RFTX

VREG_TCXO

RFT6122

VREG_MSMP

VREG_RFRX

VREG_MSMA

VREG_MSMC

Duplexer

VREG_RUIM

BATTERY3.7V

MSM6000

RFR6122

PA

Power Detector

KEYPAD

MEMORY

LCD MODULE

MIC

VCTCXO

MICBIAS

LED

HEADSET MIC

AUDIO PA

DC JACK5V

PNP

VIBRATOR

PA TRANSISTOR

RUIM

VPH_PWR



PWB Bottom Side

Power management IC

RF transmitter

TX saw filter

power amplifier

cell duplexer

RF receiver

RX saw filter

MSM 6000 Flash IC

19.2MHz TCXO



PWB Overview - Top

LCD_SER_A0

LCD_SER_CS_N

Antenna connector

LCD_SER_DATA

LCD_SER_CLK

Display connector

LCM LEDs

REC_P

REC_N

Keypad LEDs



Based on the common Qualcomm engine, the major components are:

• Power Management -• MSM6000-Mobile Station Modern• Memory– 32Megabit Flash+8Megabit

SRAM• Audio – Earpiece, microphone, speaker• Display – 96x65 dot matrix FSTN LCD

module• User interfaces

KeypadRUIMAccessory – headset, charger, data

cables etc…

BB7.0 In Detail



Subsystems within the MSM6000 device include a CDMA processor, a DFM processor, QCT’s QDSP2000™ DSP for voice compression,PLL and an ARM® ARM7TDMI microprocessor. Also integrated in the MSM6000 device are an audio voice codec and analog interfaces for the radioOne RF ASICs.Controllers for an R-UIM, GPIOs, and peripheral interfaces complete the system integration.

MSM6000 Solution General Features• RadioOne™ Zero Intermediate Frequency (ZIF)/Direct Conversion Architecture• CDMA2000 1x Release 0• Supports IS-95-A and IS-95-B compliant CDMA and AMPS subscriber units• Voice Centric (EVRC 8 kbps)• 8x Searcher, plus an independently controlled 16x Searcher• 2-way Short Message Service (SMS)•Supports peak rates of 14.4 kpbs packet data in forward and reverse links simultaneously

Mobile Station Modem



The PM6610 IC controls the power distribution to the whole mobile terminal through the baseband and RF regulators excluding the power amplifier (RF PA), which has a continuous power rail directly from the battery. The battery feeds power directly to the following parts of the system:

• PM6610

• RF PA

• Vibrator

• Keyboard & LCD backlights

• Audio Amplifier

Universal Energy Management



The main clock signal for the baseband is generated from the voltage and temperature controlled crystal oscillator VCTCXO. This 19.2 MHz clock signal is generated at the RF and fed to TCXO_IN.

RF Clock – Analog/Digital



The UPP distributes a 19.2MHz Clock signal to the internal processors, the DSP and MCU, where SW multiplies this clock by seven for the DSP and by two for the MCU.

RF Converter Clk



The 32.768 kHz crystal oscillator is the primary SLEEP clock source, when TCXO clocks are disabled to conserve power. The 32.768 kHz crystal oscillator signal is generated by an external crystal (plus two shunt capacitors) that supplemented by a PM internal inverter and buffer.

Sleep Clock



A 9.6 MHz clock signal is used for SBI, which is used by the MSM to transfer data between the PMIC and MSM6000.

The system clock is stopped during sleep mode by disabling the VREG_TCXO. The TCXO is turned off by the PMIC regulator which is from MSM’s TCXO_EN output signal.

Serial Bus Interface (SBI) Clock



Troubleshooting

First, carry out a through visual check of the module. Ensure in particular that:

• There are no mechanical damages

• Soldered joints are okay

• ASIC orientations are okay

Troubleshooting instructions are divided into the following sections:

• "Mobile Terminal is Totally Dead"

• "Flash Programming Does Not Work"

• "Power Does Not Stay on or the Mobile Terminal is Jammed"

• "Charger Faults"

• "Audio Faults"

• "Display Faults"

• "Keypad Faults"



Mobile is dead

Is the mobile terminal current is zero or too

high?

Is the currentU<U 60 mA?

Check RESIN_N signals. Is it high (2.8V)?

Reflow orchange

MSM6000

Reflow/ change PM6610.

Is flashprogramming OK?

Check PS_HOLD signals. Is it high (2.9V)?

Reflow orchange

MSM6000

Reflow orchangePM6610

YES

NO

Check the “BSI” line atJ700, C714, R709.

Are they OK?

YES YES

YES

NO

NO

YES

NO

Mobile Terminal is

Dead

Mobile Terminal is

Jammed

FlashFaults

♦If current is zero, check L101, Q700, R710 and check the power on sequence. If there is no power output, reflow or change PM6610.♦If current is too high, check for shorts.♦Make sure all BB regulators are at their respective voltage levels (VREG_MSMA, VREG_MSMP, VREG_MSMC, VREG_TCXO). Reflow/ change PM6610 if necessary.

NO NO

YES

Check ROM_CS_N (TP423). Is it toggling after

RESIN_N goes high?YES

NO

Reflow orchange

the memory IC



Current Limitations

Regulator MaximumCurrent

(mA)

Vout

(V)

Notes

VREG_MSMC 150 2.75 Enabled always except during power-off mode

VREG_MSMP 150 2.95 Enabled always except during power-off mode

VREG_MSMA 150 2.6 Enabled only when the system is powered on (Off during sleep and power-off modes)

VREG_TCXO 50 2.85 Enabled only when the system is powered on (Off during sleep and power-off modes)

VREG_RUIM 150 3.0 Enabled only when RUIM card is used

VREG_RFRX 150 2.65 Enabled when the receiver is on

VREG_RFTX 150 2.65 Enabled when the transmitter is on



Current Test Points



Current @ Zero/Too High?

1.) Measure BB regulator voltage levels: VREG_MSMC – 2.75V, VREG_MSMP – 2.95V, VREG_MSMA – 2.6V, VREG_TCXO – 2.85V

2.) Voltage here should be the same as the one from power supply

3.) Voltage here should be 3.3V ~ 4.2V

RESIN_N

PS_HOLD



Start-up Sequence



Start-up Timing (1/2)

13ms<TRESET1<30ms

VREG_TCXO

RESIN_N

PS_HOLD

PWR_ON_SENSE_N

TREG1 < 10ms

VREG_MSMA

VREG_TCXO

PWR_ON_SENSE_N

VREG_MSMP

VREG_MSMC



Start-up Timing (2/2)

TPSHOLD<133ms

VREG_TCXO

RESIN_N

PS_HOLD

PWR_ON_SENSE_N



The BSI Line

If all of the above checks pass, then check whether terminal jammed or if flash faults exist.

1.) BSI Line @ J700

2.) BSI Line @ C714

3.) BSI Line @ R709

4.) VREG_TCXO – 2.85V

Note: The BSI line must < 1.8V for proper operation



RXD = Data to Phone

TXD = Data to PC

VREG_MSMP = 2.95V

When flash programming, the Flash Adatper uses the above signals to connect to the Phone. All logic voltage levels are 2.95V. Power is supplied to the phone using the battery contacts.

Flash Interface/Signals



Flash Faults FlashFaults

Measure 19.2MHz RF CLK at testpoint. Is it OK? NO

Measure the 19.2MHz CLK coming from the TCXO. Is it

OK?NO

Check/ change VREG_TCXO, Y702, R703, C704, C724, R714, C712, C722, R704, R413, and

C403

YES

YES Reflow or change MSM6000

Can the mobile terminal connect to PC via UART? NO

YES

Mobile Terminal is Jammed

Reflow or change the memory IC

Reflow or change the memory IC.Is it work?

NO

YES

ENDYES

Check ROM_CS_N (TP423) and WR_N (TP429). Are they

toggling during programming?

NO Reflow or change MSM6000



Flash…

19.2MHz System Clock

VREG_TCXO – 2.85V

ROM_CS_N

WR_N



Jammed TerminalMobile

Terminal is Jammed

Measure VREG_MSMP, VREG_MSMC,

VREG_MSMA, and VREG_TCXO voltages. Are

they OK?

NO

Check VPH_PWR, VREG_MSMP, VREG_MSMC, VREG_MSMA, and

VREG_TCXO capacitors. Are they OK?NO

Repair capacitors, reflow/ change TCXO/

PM6610

YES

YESCheck “BSI” line and

VPH_PWR line. Are they OK?

NO Reflow or changePM6610

YES

Measure 32kHz Sleep CLK from testpoint. Is it OK? NO Measure the 32 kHz clock

crystal. Is it OK?NO Change Y700

YES

YES Reflow or change PM6610

Measure 19.2MHz RF CLK at testpoint. Is it

OK?

NOMeasure the 19.2MHz CLK coming from the

TCXO. Is it OK?NO

Check/ reflow/ change VREG_TCXO, Y702,

R703, C704, C724, R714, C712, C722, R704, R413,

and C403YES

YES Reflow or change MSM6000

Measure RESIN_N. Is it high (2.8V)?

NO Reflow or change PM6610

YES

Change MSM6000



Jammed Terminal

1.) Measure BB regulator voltage levels: VREG_MSMC – 2.75V, VREG_MSMP – 2.95V, VREG_MSMA – 2.6V, VREG_TCXO – 2.85V

VPH_PWR, it should be 3.3V ~ 4.2V

BSI Line @ J700 BSI Line @

C714

BSI Line @ R709

3.) Measure 19.2MHzSystem Clock output

2.) Measure 32kHzSleep Clock output

4.) Measure RESIN_N. Is it high (2.8V)



Charging Circuitry

The PM6610 IC charge control is dependent on the charger type and the battery size. The charger’s DC input is through the dc-jack connector. This phone supports AC-3/AC-4 & DC-4 chargers.



Charging Circuitry

Connecting a charger, it creates a voltage on the VCHG input of the PM6610. Charging starts when the PM6610 detects the VCHG input voltage level above 3.3V. The algorithm basically consists of the following three steps:

• Check that the system current (the collector current of PNP transistor) is within safety limits (<0.6A).

• Check the power consumption of PNP transistor is within safety limits (<1W).

• Check that the charger is within the charger window (voltage and current).

If the charger is accepted and identified, the appropriate charging algorithm is initiated.



Battery Circuit

The 1255 uses a Lithium-Ion cell battery. MSM6000 reads the resistor inside the battery pack on the BSI line to identify the battery size. Different charging algorithm will be used for different battery sizes. The resistors is connected to the BSI pin inside the battery connector.



Charger Faults ChargerFaults

Connect the charger and make sure the battery is

connected.

Check the “BSI” line. Is it about 75k Ohm or 81k

Ohm?

NOCheck/ change DC jack,

C714, C709 and VREG_TCXO.

YES

Measure voltage at D1006.

Is it >4.5V?

NOCheck/ change DC jack, L101,

D1006, C1030, R700, C717 and Q700.

YES

Read MOBILE TERMINAL_THERM value.

Is it room temperature?NO Check NTC R606 and

R605. Are they OK?NO Replace NTC

or R605

YES YES

Measure voltage between pin#1 and pin#3 of Q700. Is it

>0.7V

NO

Reflow or change MSM6000

YES

Change Q700

Check R708.Is it OK?

NO Reflow/ change R708

YES

Reflow or change PM 6610



Charger Faults

1.) Check the “BSI” line of battery. Is it about 75K Ohm or 81k Ohm to GND?

2.) Measure voltage at D1006. Is it > 4.5V

VREG_TCXO, it should be 2.85V

Check NTC (R606) and R605 Are they OK?

3.) Read PHONE_THERM value. Is it about the room temperature?

1

3

4.) Measure voltage between pin#1 and pin#3 of Q700. Is it > 0.7V



The audio control and processing is provided by the MSM which contains the audio codec, the MCU and DSP block. These blocks handle and process the audio data signals. The baseband supports two microphone inputs and three receiver/ speaker outputs.

The two microphone inputs: MIC1+ & MIC1- : input of 1255 schematic are used for the mobile terminal’s internal microphone.JACK_MIC+ & JACK_MIC- : input are used for headsets.

Every microphone input can have either a differential or single-ended AC connection to MSM circuit: The internal microphone (MIC1+) andexternal headset microphone (JACK_MIC) are both differential signal which come from different sources and are connected to separate inputs at the MSM.

The MICBIAS output is used for MIC1 to provide 1 mA of current at 1.8 Volts DC. VDD_MSMP (2.85V) regulated voltage from PMIC is used for JACK_MIC (external headset).

Audio Control



Audio Faults

Retest

AudioFaults 1

Is the onboard receiver working?

Replace the receiver. Is it

working now?

Use CCS SoftwareTestingStereo

Audio/VibraReceiver Mobile terminal Receiver Loop Back Test

command

Is the signal coming out of the MSM6000

on EAR10+ and EAR10- ?

Change the receiver.

NO

Check/ change C506, C507, c508. If OK, change the

MSM6000 .

Audio Faults Page 2

YES

YES

YES

NO

NO



Is Audio signal present at EAR10+ & EAR10-?

If ok, replace the earpiece.

If not ok, check c506,c507,c508,d501,d502 component.

C508C506 C507

Audio Faults

D501

D502

EAR10+

EAR10-



Audio Faults 2 AudioFaults 2

Is onboard microphone working?

Replace the microphone. Is it

working now?Retest

Audio Faults Page 3

Measure MICBIAS voltage from MIC1+ pads. Is it 1.6V~ 1.95V?

Check/ change R500,C528. If OK, change MSM6000.

Check/ change C509, C510, R501 If OK, change MSM6000.Is the signal going to the MSM6000 at

MIC1+ and MIC1- at C503?

NO YES

NOYES

NO

YES

NO

YES

Retest

Use CCS SoftwareTesting Stereo Audio/Vibra

MicrophoneMobile terminal Microphone Test command



1.) Does MICN @ MICP read ~1.95v?

If not, check: R500, R501.

If ok, go to step 2.

2.) Is signal going to UPP @ MICP and MICN @GM500

If not, check connections at: R500, R509,R510,R501, C503, C509, C510, and C528,D504,D503.

If ok, change Microphone.

Audio Faults 2

MICN

MICP



Audio Faults 3 AudioFaults

3

Check/ change R1029,R1030,R1031,R1032.,R501 If OK, change

MSM6000.

Audio Faults Page

4

Select a ring tone and measure signals at L1003 and L1004. Are the signals OK?

Change IHF

Measure FF_SPKR_EN. Is it OK (2.9V)? And U1001

Vcc = VPH_PWR

ChangeMSM 6000 and

PM6610


SpeakerMobile terminal Speaker control Test command

Is the internal handsfree speaker

(IHF) working?NO

YES

NO

YES

NO

NO

YES



L1003

L1004

1.) Check L1003 & L1004.

If not ok, go to step 2.

If ok, change IHF.

3.)Use SoftwareTesting Stereo Audio/Vibra SpeakerMobile terminal Speaker control Test command

If not, check or change R1029,R1030,R1031,R1032,R501.

If OK, change MSM6000.

Audio Faults 3

R1029

R1030

R1031

R1032

R501

2.) Measure 2.9V @ FF_SPKR_EN and U1001=VPH_PWR.


If not ok, change MSM6000 and PM6610.

U1001

FF_SPKR_EN



Audio Faults 4 AudioFaults 4

Is the vibrator working?

Measure VBATT voltage pin 1 on the vibrator. Is it

OK?

Check VPH_PWR line. Is it OK?

Reflow/ change battery, CR700,

C726

END


Vibrator Control Test Command vibrator should work.

Measure the PM 6610 signal on

pin 2 on the vibrator. Is the

signal OK?

Change the vibrator

Change the PM 6610, CR700, C726

NO

YES

NO

NO

YES

NO

YES



1.) Measure PM6610 signal at Vibra Pin 2.

If not ok, replace PM6610.

3.) Measure VPH_PWR voltage at Vibrator(Vibra).

If not ok, check VPH_PWR line. If ok, change PM6610.

If not, repair.

2.) Via the User’s menu, test a vibrator to determine Vibra functionality.

4.) Replace Vibra.

Audio Faults 4



Display Faults

Measure battery voltage at DNI700 pin1. Is it okay?

Check/ change battery and

VPH_PWR line

Measure the voltage at Q1_pin2. Is it change to low?

Measure the driver signal at Q1_pin1. Is

the signal okay?

Replace Q1

Check R206, R207. Does the voltage across resistor is

okay?

Check LEDs DS200 and DS201. Are they

okay?

Check resistor soldering / Replace

R206, R207

Reflow/ change any bad component DS200, DS201

Retest

Do the keyboard LEDs turned on when the mobile terminal is

turned on or when making a call?

DisplayFaults 2

DisplayFaults

Reflow/ change MSM6000

NO

YES

NO

YES

NO

YES

NO

YES

NO

YES

NO

YES



Q1

R207

DS200

C2404

4.) Check LEDs DS200 and DS201

If ok, retest again

If not ok, reflow/change DS200, DS201.

2.) Measure driver signal @ Q1


If not, reflow/change MSM6000.

DNI700

1.) Measure battery voltage @ DNI700.


If not, check/change battery and VPH_PWR line.

3.) Check the voltage @ R206,R207.


If not ok, soldering/change R206, R207

DS201

R206



Display Faults 2

Check LCD supply voltage at J401 pin9. Is it okay?

Change PM6610

Check LCD signals: LCD_SER_CLK(J401_pin4),

LCD_SER_DATA(J401_pin5), LCD_SER_A0(J401_pin6),

LCD_SER_CS_N(J401_pin7). Are the signals okay?

Change LCD module

Does the display start?

DisplayFaults Page2

Check/ change MSM6000

END

NO

YES

NO

YES

NO

YES



LED Driver

The mobile terminal uses light-emitting diodes (LEDs) for liquid crystal display (LCD) and keypad illumination. There is two white LEDs for the LCD and six LEDs for the keypad. BACKLIGHT is the signal used to drive the LED driver for the LCD and keyboard.



Signals and levels:

• LCD bus : LCD_SER_CLK, LCD_SER_DATA, LCD_SER_A0, LCD_SER_CS_N

• VREG_MSMP : 2.95v for LCD digital logic

• RSOUT_N : for LCD reset

LCD Interface

The mobile terminal uses a monochromatic LCD. The interface uses a serial bus to transfer the Command/ Data between MSM and LCD.The panel for 1255 is a 96x65 dot matrix FSTN LCD module. It has a FSTN panel composed of 96 segments and 65 commons. The LCD interface uses 4-lines for controlled Command/ Data with 9-bit data.



Keypad Faults 1

NO

YES

KeypadFaults

Is the power key working?

Measure voltage atSw9 PIN2 (2.8V).

Is it high?

Change the PM6610

Measure voltage at SW9 when power key is pressed. Is it Low?

Retest

Keypad Faults Page 2

Change the PM6610

NO

YES

NO

YES



2.) Is UEM Pin8 Voltage Low when Power key depressed?

If ok, see Mobile Terminal is Dead troubleshooting.

If not ok, check SW9 line.

Keypad Faults 1

1.) Is UEM Pin8 Voltage high?


If not, check:

UEM VDD Voltage

If ok, replace UEM.

If not, check VPH_PWR Voltage.



Keypad Faults 2

NO

Keypad Faults Page

2

Are the UI module keys working?

NOChange keypad module.

Is it working? YES Retest

YES

Measure KEYSENSE(1~4)_N signals between MSM6000 and keypad at every

outer dome key. Are they ~2.9V? NO

Make sure there are no shorts on KEYSENSE(1~4)_N. If OK, change MSM6000.

Otherwise, remove the short.

YES

END

Measure KYPD_(9,11,15,13) signals between MSM6000 and

keypad on every inner dome Key. Are they about 0V?

NO

Make sure there are no shorts on KYPD_(9,11,15,13). If OK, change

MSM6000. Otherwise, remove the short.

YES

Change the MSM6000



1.) Measure signals KEYSENSE(1~4)_N between the UPP any keypad @ every dome key. Do they read ~2.9V?

If not, make sure there are no shorts . If ok, replace UPP.

2.) Measure signals KYPD_(9,11,13,15)between the UPP and keypad @ every dome key. Do they read ~0V?

If not, make sure there are no shorts . If ok, replace UPP.

Keypad Faults 2



The 1255 supports following accessories.

Pop-port bottom connector pin out . The pin out on the 1255 connector is as follows: • DC Charger Input Blue • Headset Jack Input Green • Mic Input Purple You can perform the following in 1255 accessories: • Charging • Audio interface headset mic and receiver

Accessory Detection



Headset Detection

The phone support Nokia standard 2.5mm mono headset. The headset insertion to the phone is detected through pin 3 (HS_DET) of the headset Jack, J1001. HS_DET (“JACK_SENSE” pin in 1255 schematic) is low when headset not inserted. It becomes high when headset is inserted.

Headset Detection Circuit



The 1255 Series phone supports UIM. Use the waveform in the Figure to verify that:

UIM_DATA,

UIM_CLK,

UIM_REST, and

VREG_RUIM signals are activated in the correct sequence at power up.

This image may be observed when the UIM is installed on the phone and functioning normally.

SIM Interface/Signals



Questions??? Thank You for your attention!

© Nokia 1255_Baseband_Training / Jan 2006 / CFSCompany Confidential 1255 Technical Training...

Documents

Transcript of © Nokia 1255_Baseband_Training / Jan 2006 / CFSCompany Confidential 1255 Technical Training...