1. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential 1255 Technical Training RF Troubleshooting Presentation NMP-CDMA, San Diego Jan, 2006

2. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Disclaimer Materials current at time of publish and based upon most current R&D Documentation. Please refer to the latest product TB to determine further handset hardware variations if any.

3. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Introduction The mobile terminal uses a Qualcomm MSM6000 baseband with a CDMA single mode engine (Cellular/ 800) consisting of two primary ASICs: RFT6122 RF transmitter IC RFR6122 RF receiver IC

4. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential PWB Bottom Side Power management IC RF transmitter TX saw filter power amplifier cell duplexer RF receiver RX saw filter MSM 6000 Flash IC 19.2MHz TCXO

5. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential PWB Top Side RF connector

6. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential TX Troubleshooting

7. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Tx System Block Diagram

8. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Tx RF Parts Diagram TX IC TX Saw filterPower Amplifier Cell Duplexer

9. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential FTM Setup for TX Troubleshooting 1. Connect RF test connector to a spectrum. 2. Set SW1 to “FTM mode” in Module Jig. 3. Connect the mobile terminal to a PC via the Module Jig, and connect a power supply. 4. Open CCS RF Tools software. 5. The FTM dialog box appears. 6. “Select COM port” to appropriate one. 7. Set “Connect Phone”. 8. Set “Set FTM”. 9. Set “Set Band” to “CDMA800”. 10. Set “Set Channel “to Channel “384”. 11. Set “Set PA Range R1” to “on” 12. Set TX waveform to “CDMA” 13. Set “TX on/off” to “on”. 14. Set “TX AGC” to “120”. Put the PWB on the module jig. Use the following steps to configure FTM for RF troubleshooting.

10. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Cell Tx Check from RF connector Use the following values to check the CDMA Cell Tx functionality from IQ to RF output. 1. Start FTM in Local Mode with only the Tx path turned on and “Set AGC” to “100”. 2. Transmitter output power at the RF connector to be approximately equal 24dBm/1.23MHz CDMA signal of 836.52MHz. RF Connector FSQ26 signal analyzer settings MEAS->CHAN PWR ACP->CP/ACP STANDARD->CDMA IS95A REV FREQ->836.52MHZ

11. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Tx DC Probe Points Test Point Descript ion Value 1PA_ON 2.94V for PA turning on, 0V for turning off 2PA_R1 2.0V for high gain mode,1.44V for low gain mode 3 LOCK_D ET 2.96V for Lock, 0 V for unlock 4TX_AGC 1.8V for 5dBm, 2.08V for 15dBm, 2.3V for 25dBm. 5Tx IQ in 0.8 V With oscilloscope: 500 mV p-p 6 DAC_RE F 1.83 V 7 VREG_ MSMP 2.95V 8 VREG_R FTX 2.65V 7 8 5 3 1 4 2 6 Table 1

12. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Tx DC Probe Points Test Point DescriptionValue RF Supply Lines Resistance to Ground 1 VREG_MSMP,c7 05 2.95V>11kΩ to ground U700,U900,U801,U 602 2VPH_PWR,c700 3.2~4.2 V >550kΩ to groundU700,U7 3 VREG_MSMC,c7 06 2.75V>45kΩ to groundU700,U401 4 VREG_MSMA,c7 08 2.6V>120kΩ to groundU700,U401 5VEXT_DC,r710 3.2~5.7 V ~9.3kΩ to groundQ700 6 VREG_TCXO,c72 3 2.85V>450kΩ to groundU700 7 VREG_RFRX,r71 5 2.65V>350kΩ to groundU700,U900,U801 8 VREG_RFTX,c70 9 2.65V>450kΩ to groundU700,U900,U801 3 2 4 1 8 765 Table 2

13. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Tx RF Probe Points Test Point DescriptionValue 1RFT6122 output4dBm 2PA input2dBm 3PA output28dBm 4RF connector24dBm 5UHF LO 0dBm at 1763.04 MHz Tx RF Probe Points 4 3 21 5 Table 3

14. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Tx path troubleshooting Tx path Faults Measure DC test points at Table 1 and Table 2. Is it OK? NO Check PM6610, MSM6000 YES Measure Tx RF test points 5 at Table 3. Is it OK NO Change RFT6122 YES Reflow C920, FL600, C619, U7 YES Measure Tx RF test points 1 at Table 3. Is it OK NO Reflow R903, C911 Measure Tx RF test points 2 at Table 3. Is it OK NO Reflow U7 YES Measure Tx RF test points 3 at Table 3. Is it OK YES Reflow F600, S600 Measure Tx RF test points 4 at Table 3. Is it OK NO Change U7 NO Reflow PM6610 or MSM6000 YES Check Antenna Module If RF Antenna feed point pad obstructed, clean the pad. Connect System Simulator to MS antenna. Is it OK NO

15. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Rx Troubleshooting

16. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Rx System Block Diagram The RFR6122 IC provides the Zero-IF receiver signal path for Cellular-CDMA reception. For this chipset, Cellular-CDMA refers to band classes 0 and 3 as defined by the cdma2000 standard, with mobile station receivers operating between 832 and 894 MHz. The Rx signal path includes the LNA, quadrature downconversion, and baseband functions. The Cellular-CDMA receive signal is routed from the antenna to the RFR6122 IC via the duplexer. The analog baseband outputs interface with one of Qualcomm’s Mobile Station MSM6000 devices that also provide status and control signaling. Integrated RX LO circuits, ideally supplemented by the RFT6122 transmitter IC, provide frequency plan flexibility and further reduce PCB parts count.

17. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential FTM setup for RX troubleshooting 1.Connect RF test connector to a spectrum. 2.Set SW1 to “FTM mode” in Module Jig. 3.Connect the mobile terminal to a PC via the Module Jig, and connect a power supply. 4.Open CCS RF Tools software. 5.The FTM dialog box appears. 6.“Select COM port” to appropriate one 7.Set “Connect Phone”. 8.Set “Set FTM “. 9.Set “Set Band” to “CDMA800”. 10.Set “RF Channel “to Channel “384”. 11.Set “LNA Range” to whatever needed. Put the PWB on the module jig. Use the following steps to configure FTM for RF troubleshooting.

18. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Cell Receiver Check from RF to IQ shows the Cell spectrum with an inject tone at -75 dBm, as well as the IQ output test points. Note that DC is present on the IQ output test points. All test points should be approximately equal. Use the following values to check the CDMA Cell Rx functionality from RF to IQ output. 1. Start FTM Mode with only the Rx path turned on and set LNA_GAIN_STATE=0. 2. Inject a -75 dBm CW signal of 881.82 MHz (i.e. 300 kHz offset from 881.52 MHz or 10 channels away). 3. Measure a 300 kHz tuning on the analyzer. You should see a typical -52 dBm IQ tuning for CDMA Cell. FSQ26 signal analyzer settings RBW-> 3 kHz VBW-> 300 Hz Sweep Time-> 450 ms Reference Level-> -20 dBm FREQ-> 300 kHz Span-> 200 kHz

19. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential 3 1 2 Receiver DC Probe Points Test Point DescriptionValue 1VREG_MSMP,r806 2.95V 2VREG_RFRX,r801 2.6V 3LNA BIAS,L807 2.6V Table 4

20. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Receiver RF Probe Points Test Point DescriptionValue 1LNA IN -28dBm 2RX SAW INPUT -48dBm 3RX SAW OUTPUT -51dBm 1 2 3 Table 5 In RF probe test, an external signal source of –25 dBm was injected to the RF input. Set LNA GAIN STATE = 3.The signal was then traced throughout the receiver chains. An CMU200 call box is recommended. (Open non-signaling mode, press the SG soft button, and then select CW.) Inject a continuous wave (CW) for Cell (881.52MHz) at a fixed –25 dBm power level. Measurements were taken with the RF Probe. Signal levels are approximate, and the accuracy may be +/- 2 dB or more depending on the probe position and grounding.

21. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Rx Path Troubleshooting Rx path Faults Measure DC test points at Table 4. Is it OK? NO YES Measure Rx RF test points 1 at Table 5. Is it OK NO Reflow L804, C814, RFR6122 YES Reflow U800 YES Measure Rx RF test points 2 at Table 5. Is it OK NO Reflow C813, L803 Measure Rx RF test points 3 at Table 5. Is it OK NO Change RFR6122 Check PM6610 NO Reflow PM6610 Check Antenna Module Connect System Simulator to MS antenna. NO YES

22. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential RF Path Loss Set COM port and Input the maximum output power of the golden phone in dBm. Then, click “Start” button to run program. After the program is done, the path loss will be shown on the screen and recorded for the RF calibration and Call Test program. Click “Quit” for closing this program.

23. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential RF Tuning and Calibration 1.Connect RF test connector to a CMU200 or Agilent 8960. 2.Set SW1 to “FTM mode” in Module Jig. 3.Connect the mobile terminal to a PC via the Module Jig, and connect a power supply. 4.Open CCS Service SW and run RF Calibration function 5.Select “Tester Selection” Agilent 8960 or CMU200 6.Set cable loss value as the result from running “Path Loss” to Loss (dB) 7.“Select COM port” to appropriate one 8.Press “Start”. 9.If tuning and calibration is successful, screen will shown “PASS”, otherwise, check the error code table Put the PWB on the module jig. Use the following steps to configure FTM for RF troubleshooting.

24. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential RF Calibration Error Code Error Message Table: Error MessageUpper LimitLower LimitDebug FAIL:TESTERCheck your GPIB connection. FAIL:COMPORTCheck your COM connection. FAIL:DVGA30001700Possible reason: Default NV table could be wrong. File system is not exist. Image version inconsistent. FAIL:LNA0150100Check Rx/Tx path components FAIL:LNA1250150Check Rx/Tx path components FAIL:LNA2410300Check Rx/Tx path components FAIL:LNA3560430Check Rx/Tx path components FAIL:LOW_GAIN25 dBm5 dBmSynthesizer unlock FAIL:HIGH_GAIN27 dBm5 dBmSynthesizer unlock FAIL:HDET210120Check Rx/Tx path components

25. © Nokia 1255_RF_Training / Jan 2006 / CFSCompany Confidential Questions??? Thank you for your attention!