IPhone X

This page is a work in progress.

With the release of the iPhone X, we saw the beginning of a new standard of motherboard design by Apple. The iPhone X implemented a "stacked" motherboard that reduces the overall surface area in order to increase efficiency and make room for other components, including an increase to the battery size. In essence, it is like two separate motherboards have been soldered together around a perimeter. This innovative change in design has garnered much praise and has allowed for new techniques to be developed for both motherboard diagnosis and data recovery. However, it has also some glaring weaknesses. Most notably, the iPhone X is prone to broken solder pads between these two connected motherboards, which can cause a variety of problems. This page will identify and reference different iPhone X motherboard problems, and it will be assumed that small parts such as the screen or battery are not the issue.

 iPhone X thru XS Max Identification information Board Numbers 

820-00863 X Qualcomm upper layer

820-00864 X Qualcomm lower layer

820-00863 X intel upper layer

820-00869 X intel lower layer

820-00997 XS  intel upper layer

820-01018 XS intel lower layer

820-01225 XSMAX  intel upper layer {| class="wikitable" ! style="text-align:left;" | Problem ! Solution
 * No power
 * The most common manifestation of a motherboard problem presents itself in a simple form, a phone that has no power. It is very common for a symptom to be the same for a multitude of different problems. The symptom can be no power, but the problem can stem from dozens or hundreds of different lines. Therefore, it is useful to try and categorize "no power" into something that narrows down the range of potential problems. To do this, there are a few tools that can help. The most commonly used tool by this author is the DC power supply.
 * The most common manifestation of a motherboard problem presents itself in a simple form, a phone that has no power. It is very common for a symptom to be the same for a multitude of different problems. The symptom can be no power, but the problem can stem from dozens or hundreds of different lines. Therefore, it is useful to try and categorize "no power" into something that narrows down the range of potential problems. To do this, there are a few tools that can help. The most commonly used tool by this author is the DC power supply.

A good first step to diagnosing "no power" is to see what happens when we connect DC power to the battery connector. With DC power connected, there are a lot of different possibilities that we can see. In a normal, working phone we will see an amp draw only after prompting the phone to boot that gradually rises from zero to around 1 amp.

Immediate current (before prompt to boot)

If, when we connect DC power to the battery connector, we see an immediate draw of current, this indicates we have a main line short to ground. Most commonly, a large current (2A or more) indicates that we have a short on VDD_MAIN. However, we can also see this type of current stemming from VDD_BOOST, BAT_VCC, SPKRAMP_TOP_VBOOST, and any other line that ties directly into VDD_MAIN through any components. To identify the offending line, a multimeter is used to check the different lines for connections to ground. Once the line is confirmed, the hunt for the individual component starts.

There are a few different methods used for identifying a shorted component, all of which can be viable. In essence, something must provide voltage and something must show a heat differential. This author uses a combination of DC power to provide voltage (thus also provided heat) along with freeze spray in order to reveal the shorted component. If we freeze spray the entire board, then provide voltage directly to the shorted line, that voltage will move to and heat up the offending component. This reveals the problem by melting the freeze spray at that component. We can then visibly see the melted component. Once the component is replaced or removed, the line is clear and the phone will boot.

This specific problem can be viewed in full, from the finding of the problem to the solution at this video: https://www.youtube.com/watch?v=Xr3lcxkkOK8&t=1s

Zero current (after prompt to boot)

If we connect DC power and prompt the phone to boot but see zero current, that can indicate a few different problems. The worst case scenario would be that the CPU is dead, however, that is rarely the case unless the board has been overheated by another motherboard tech. Most commonly, zero current will indicate a shorted secondary power rail.

Common signature failue due to tech damage

Asking for history on dead no power or no boot devices can help lead to a solution. One of the most common issues is tech damage from slippage of pry tools and screwdrivers. If history comes in for screen repair or known to have been working and then after opened it stop working check capacitor C2647. This capacitor is on the edge of the logic board next to the NAND memory. This capacitor commonly gets damaged when the screen gets pushed down and the bracket from the screen cracks and damages the capacitor causing it to fail and short to ground circuit line PP1V8_IO. The behavior you will get from diagnosing with DC power supply upon prompt to boot is current draw of around 400mA cycling.



((In Progress))
 * Turns on but does not charge
 * If the phone turns on but doesn't charge, you'll want to first rule out a parts issue:
 * If the phone turns on but doesn't charge, you'll want to first rule out a parts issue:


 * Unplug everything, ear speaker flex, power button flex, cameras, antennas, etc.
 * Only leave the screen, charging port and battery, then test again
 * If still not charging, test with a known good charging port, battery and screen.

Troubleshooting & Solutions:

No Touch
 * 1) Sometimes, the ear speaker flex, which has a flood illuminator (for Face ID) and ALS sensor (for auto brightness and true tone), will get liquid damaged
 * 2) * These sensors sit right by where the ear mesh is located and it's super easy for liquid to sneak into the phone and get on these sensors. The corrosion will short data lines underneath them and cause bootlooping, not charging and other random issues.
 * 3) * If this is the case, you can either
 * 4) ** Replace the flex and lose Face ID
 * 5) ** Or safely remove the flood illuminator off the flex, clean off the corrosion and place it back
 * 6) ** Or sometimes the flex is damaged beyond repair, so you can swap the sensors to a new flex.
 * 7) In majority of cases, you'll find that replacing Tigris (U3300) will solve charging problems
 * 8) * Tigris will give the common "Tristar" issues that you would see on iPhone 7 and older models.
 * 9) * I would recommend you split the sandwich & test charging with just the top board, battery, charging port and screen.
 * 10) ** If you get 0.006A or something very low, try replacing Tigris
 * 11) * If it's still not charging, then the next most likely will be the Tigris Coils, L3340 and L3341.
 * 12) ** Replace them and test if it charges with just top board. If it does, then it's solved.
 * 13) In rare cases, Hydra will be the cause of the no charging.
 * 14) * Replace Hydra and see if that solves it.
 * Touch not working
 * Touch not working
 * When dealing with an iPhone X with No Touch, first step is to rule out a parts issue:


 * Unplug everything, ear speaker flex, power button flex, cameras, antennas, etc.
 * Only leave the screen, charging port and battery, then test again
 * If still not charging, test with a known good charging port, battery and screen.

Please note, there are 2 version of the iPhone X.


 * Qualcomm (CDMA) A1865
 * Intel (GSM) A1901, A1902

Troubleshooting and Solutions

Sandwich Separation


 * 1) Most common cause of No Touch is separation between the top layer and interposer. AKA sandwich separation
 * 2) * Diode mode the Touch Connector (J5800)
 * 3) * If you find any lines that are OL, when they should have a Diode Mode reading, high chance the issue is the sandwich separating
 * 4) * Using a preheater/bottom heater, separate the top layer from the interposer
 * 5) * Check for any ripped pads
 * 6) ** If ripped pads, you'll need to repair them by scratching out the vias and traces, which may be difficult in some cases, as the traces are very fragile and small.
 * 7) * Then use an iSocket type of jig, that allows you to connect the top and bottom boards temporarily using spring loaded pins.
 * 8) * If touch works, then reball the sandwich and diode mode the touch connector again.
 * 9) * If the missing Diode Mode readings are back, then it should be solved
 * 10) Sometimes, the damage on the board is not the top layer, but on the bottom layer or bottom board and it requires a bottom board swap
 * 11) * Check if the board bends near where the SIM slot meets the interposer. Often times you'll see separation in that area.
 * 12) * Split the sandwich, then test the top and bottom boards in the iSocket type of Jig.
 * 13) * If still no touch, test the top board with a known good bottom board of the same version (QCOM/Intel). Doing this will cause baseband and Wi-Fi not to work, but that's not important right now. We're just testing if touch works
 * 14) * If touch works with another bottom board, but not the original, then it's related to the bottom board and must be swapped.
 * 15) * There are some chips that are paired on the bottom board and must be swapped over.
 * 16) ** BBCPU (U_MDM_E_)
 * 17) ** Baseband Eeprom (U_EEPROM_E)
 * 18) ***Be careful; if you damage or lose this chip, then it's game over. Cellular function will never work.
 * 19) *** A safe way to deal with this, use a eeprom reader, like the JC Module Eeprom reader for the iPhone X.
 * 20) **** While BBCPU is already removed on both original and donor bottom boards, plug in the bottom board to the appropriate slot and read using the JC PC Software. Then remove the bottom board.
 * 21) **** Then plugin the new bottom board and click write.
 * 22) **** Make sure not to mix these up! If you overwrite the original eeprom and lose that data, then it's also gone forever. No way to recover it.
 * 23) ** NFC (NFC_S)
 * 24) *** Although NFC is not required to swap over, it will add extra time to the job if you dont swap it, as you have to go through the "Swipe to recover"/"Attempting data recovery" screen which can take 1015 min to process.
 * 25) ** Wi-Fi (UWLAN_W)
 * 26) *** Although it's paired, you can unpair it using the iRepair P10 or similar tool that allows you to set the device into Purple Mode and unbind via the lightning port.
 * 27) *** Here's a video on how to unpair WiFi from the iPhone X: https://youtu.be/exi0F4oMSCI
 * 28) * Once you swap over all the components above, test again with the iSocket Jig. Make sure all functions work, like:
 * 29) ** You can toggle Wi-Fi on/off
 * 30) ** There is touch
 * 31) ** The phone says "No SIM"
 * 32) *** If it says "Searching" or "No Service" or "Cellular Update Failed", check the sandwich connections again. Make sure there's no dirty flux all over the pads.
 * 33) *** Try reballing BBCPU again, might have been a bad job
 * 34) *** Try reading the original eeprom and writing it the replacement board
 * 35) *** Worst case, try an update on iTunes or 3u tools (flash and retain data), to see if that solves it.
 * 36) **** I don't recommend to restore or you will "lock" yourself out and it will require you to restore each time you "fix" the board issue.
 * 37) * This video goes over in detail, how to diagnose the bottom board issue and how to do a bottom board swap: https://youtu.be/Mx8836-Xu0M
 * 38) If you still have No Touch with known good bottom board, then check this
 * 39) * Check the line PP5V25_TOUCH_VDDH for a short or partial short.
 * 40) * See if the diode mode reading is about 0.643V
 * 41) * If it's shorted to ground or reading low like 0.235V, then you have a short.
 * 42) * Pull C5645 and check the diode mode reading again. If it's reading normal at 0.643V, then replace C5645
 * 43) ** C5645 is 4F, 20%, 6.3V, CER-X5R, 0201

If you did the above but still no touch, try checking all your tools and parts.

Sometimes there's flux that gets the iSocket dirty

Or the extension flex for the iSocket gets damaged leading to no touch

Or maybe your tester screen went bad. The bottom layer and interposer break near the SIM tray area.
 * Wi-Fi grayed out
 * In majority of cases, this will be require a bottom board swap.
 * In majority of cases, this will be require a bottom board swap.

Refer to the above "No Touch" solution for a detailed walk through on a Bottom Board Swap process.

It's the same repair steps. No Service
 * Baseband Issues
 * Baseband Issues

Always Searching

Symptoms:

 * Here are the symptoms for cellular signal issues
 * With no SIM Card installed, the phone is always "Searching..." or "No Service".
 * A working phone will show "No SIM" with no SIM Card installed.
 * Dial *#06# in the phone app, and nothing happens
 * A working phone with no Baseband issue, will make the IMEI pop up.
 * If you go to Settings > General > About > Model Firmware is blank

Troubleshooting & Solutions:
Sandwich separation


 * Split the sandwich & check for ripped pads on the top layer
 * If so, try to fix the ripped pads by scratching out the vias/traces & rebuild the pads using solder lugs
 * If no obvious bends, then test the 2 layers with the iSocket type of jig. This allows you to connect the 2 layers without soldering, for testing purposes.
 * See if the above symptoms are resolved. If so, sandwich the 2 layers back together & fully test with an active SIM & make sure all functions work
 * Including making a phone call & checking for sound through phone call
 * No sound during a phone call points towards a bad sandwich reball or separation

Bottom Board Swap


 * Doing a bottom board swap is an easy way to rule out the whole cellular circuit, as it's pretty much all located on the bottom board.
 * You do need to transfer the BBCPU, BB Eeprom & WiFi.
 * See the above "No Touch" solution with the bottom board swap instructions & details.
 * This video goes over in detail, how to diagnose the bottom board issue and how to do a bottom board swap: https://youtu.be/Mx8836-Xu0M

BBCPU Reball


 * You can considering trying a BBCPU reball to see if this fixes the baseband issue
 * This is good for someone who doesn't have a replacement bottom board available.
 * Although there's a lower chance of success, as baseband issues aren't always a BBCPU reball solution.
 * It could be BBPMU
 * Or some other part of the complex circuit.

Please note: If you attempt the above repairs, but it's still stuck in "Searching..." or "No Service", then flash an update (DO NOT RESTORE). This can sometimes solve the issue. Not sure why it is needed sometimes.

If a phone with a baseband problem is restored, then the iOS software will "erase" the IMEI (baseband info) in the phone and will require the board issue to be fixed, then restored again, so the software will bring back the IMEI.

If you restore, and still has no IMEI, then a baseband/board issue is still present on the board. That will need to be fixed, then restored again. 3 Minute Restart
 * Random Restarting
 * Random Restarting
 * Symptoms:


 * The phone will restart every 3 minutes or so

Solution:


 * For iPhone X and newer, there are sensors that are required to be detected by the operating system, otherwise, the phone will restart every 3 minutes.
 * Many times, this can happen after a hard drop, housing replacement or back glass laser repair.
 * You can look up the Panic Log in the Settings > Privacy > Analytics & Improvements > Analytics Data > then scroll down to the files that start with "panic-full..."
 * If you can find in the panic log "thermalmonitord..." and "missing sensor(s): Prs0" or "Mic1", then the issue will be due to a bad charging port
 * Make sure you have the charging port plugged in
 * Make sure the replacement port is OEM or Premium quality.
 * Aftermarket charging ports can still cause it to restart, even if it is charging fine
 * Here's a detailed video on how to read panic logs for troubleshooting random restarts: https://youtu.be/QaJLYbtuCGA

No "Backlight"
 * No Image
 * No Image
 * iPhone X uses an OLED display. This mean, there's no backlight, but many people will still diagnose No Image as "No Backlight".

Always make sure to test with a known good screen, to rule out a parts issue.

Symptoms:


 * Phone turns on but nothing displays on the screen
 * Screen always stays black
 * You can hear sounds & feel vibrations.

Solution:

pressure sensor 00, Kernel panic Cause: technician damage, water damage, dust and debris infiltration, solar damage (left in the sun), trace severance due to work hardening of copper traces.
 * Diode mode the display connector (J5700) & check for any shorts or OL (Open Lines).
 * In most cases, you'll find PP3V0_DISPLAY_CONN filter FL5783 is blown & needs to be replaced.
 * In other cases, you may find one or more of the 5 chokes L5700, L5710, L5730, L5740 or L5720 is damaged or broken from pry damage
 * In rare cases, you may discover there is long screw damage in the screw hole next to the battery connector, which will sever image lines from the chokes mentioned above.
 * Bootlooping
 * Bootlooping
 * symptoms:
 * Shows apple logo for about 5 seconds, then blank, then apple logo, then blank

Solution: unplug/ remove or replace face ID / front sensor array flex. moving the face id chip onto the new flex is nessaracy to reatain face id functions Low power state Cause: SN2501 IC Fault, BMS failure, battery cell failure. PMW chip failure, charge port damaged or dirty. may also be due to various short circuits consuming excessive battery power. Solution: test a new battery, run a tristar usb ic2 tester box, inspect chip and surrounding caps and resistors , check PMW  surrounding caps and resistors replace IC's if necessary guide for Tristar USB IC Error 4013
 * Bootlooping
 * Bootlooping
 * symptoms:
 * Shows apple logo for about 5 seconds, then blank, then apple logo, then blank
 * Sometimes it shows a green / purple flash for a second
 * Bootlooping
 * Bootlooping
 * Symptoms:


 * Shows apple logo for about 5 seconds, then blank, then apple logo, then blank
 * Sometimes it shows a green flash for a second
 * If you try to flash an update or restore, it fails right away with an Error 4013
 * If you flash on 3u tools, it fails at 19%

Solution:

Flex Cables:


 * Step 1 in this case is always unplug all the flex cables.
 * Ideally test the board with known good Screen, Battery & Charging Port.
 * If it boots, then one of your flexes is the cause.
 * 99% of the time, it is the ear speaker flex. The Flood Illuminator and/or the ALS has liquid damage.
 * The ear speaker flex is paired to the logic board for Face ID.
 * If you want to keep Face ID, you'll need to repair the flex. If Face ID is not important, then you can just replace the flex.
 * To repair the flex, you'll have to desolder the component & clean out all the corrosion, then place them back.
 * If the corrosion is too severe & it damaged the flex, then you'll need to swap the Flood Illuminator and ALS to a new flex, otherwise, you'll lose Face ID.
 * In some cases, another flex can cause this issue like a bad charging port.
 * In this case, just replace the flex

Sandwich Issue:


 * In some cases, the bootlooping and Error 4013 is caused by liquid damage on the bottom board.
 * Underneath the interposer, there are solder balls that connect to the bottom layer.
 * This solder is leaded high temp solder, so it's not easy to separate.
 * But you can split the top layer & test with a known good bottom board & see if it boots. If so, then your issue is on the bottom board
 * Inspect the space between the interposer and bottom layer & check for any signs of corrosion.
 * In some cases, you can get away with reflowing the area you find the corrosion.
 * The bubbling of the flux can cause enough friction to clear the corrosion causing bridging between pads.
 * If this doesn't work, you'll need to do a bottom board swap to get the device working.

Please Note: If the phone is stuck in Recovery Mode because it failed at the Error 4013, you have 2 options


 * 1) Kick the device out of Recovery Mode using 3U Tools. In the main screen of 3U Tools, you'll see a button that says "Exit Recovery Mode"
 * 2) You can attempt another update or restore.

Assuming you fixed the root cause of the bootlooping issue, the above 2 options should get you a working phone.

If it still fails at 4013 or still bootloops, then you haven't solve the issue. Other tips about working with iPhone X motherboards
 * Move lower / higher when configuring Face ID
 * The dot projector has failed, or its crystal got damaged. If you see physical damage, replace the crystal, if not, fix the dot projector flex Video
 * Singleboard boot-up
 * For iPhone X Intel version. Below IOS12 you need to apply 1.8V to S48 (connect S41 to S48) to boot into the system. Above IOS12 you need to flash the firmware to boot into system. (no need to apply voltage)Image.png
 * Activation issue
 * NFC chip malfunctioning will cause activation issue.
 * }
 * Activation issue
 * NFC chip malfunctioning will cause activation issue.
 * }


 * There are two version Base Bands
 * Intel
 * Qualcomm
 * Qualcomm version logic boards will boot up without the base band bottom board
 * Intel version logic boards will NOT boot up without the base band bottom board

FPC Connectors diode mode readings
Use these diode mode maps as a guide to troubleshoot a problem. You must use the RED PROBE on ground and the BLACK PROBE on the pin you are measuring.

For example: you are troubleshooting a no backlight situation, so you probe the pins on the display FPC that correspond to backlight. If a pin says you should read 0.65 and you are reading OL or a short to GND then that's where you need to go.

If instead of getting 0.65 you read 0.58, move on to the next one, remember every multimeter is different and even slight differences in temperature affect this readings. What you are looking for is extreme differences in values, if you are expecting some value and you get a short to ground that is where it is more likely to be your issue.

Battery connector (J3200)
iPhone X battery connector. Pin 1 goes to bottom right, by the SIM card reader.

No data as of yet.

QUALCOMM
No data as of yet.

Panic Logs errors and meanings
iPhones can randomly restart due to many issues and for certain models, it is due to a bad flex in the housing.

These models require the Charging Port to be plugged in or else it will restart every 3 minutes.  iPhone X iPhone XS iPhone XS Max These models require the Charging Port and the Power Button Flex to be plugged in, or else it will restart every 3 minutes.

iPhone 11 iPhone 11 Pro iPhone 11 Pro Max In scenarios where you have the appropriate flexes plugged in, but it still restarts, then you either have:

Bad or damaged flex Low quality aftermarket flex Liquid damaged flexes (check other flex cables, like volume, camera, antenna, etc) Or it could be something else

Now that you know how to review the panic logs, now let’s get dive a bit deeper.

If you see “thermalmonitord” in the most recent panic log, then you have a charging port or power button flex issue.

Review the part where it says “Missing sensor(s):”

If you see the following

'''Prs0 Mic1 Then the issue is the charging port flex. Install a new, OEM or Premium Charging Port 'Italic text'' If you see this

Mic2 Then the issue is going to be the power button flex.

Panic Log Errors Here are some other Panic Log errors that you may come across. I haven’t confirmed them all. But they may lead you towards the solution. SOURCE: PRO-mobile

“AOP PANIC – PressureController” – Barometer This error occurs mainly on iPh X and above, there is a barometer on the system cable at the bottom near the left microphone.

“ANS / ANS2” – NAND Mostly due to NAND, but look for keywords in the logs.

“SD: 0 Missing sensor (s): TG0B” – battery / TIGRIS The device does not see the battery.

“AOP PANIC – SCMto: 0 – prox” – PROXIMITY A proximity sensor, usually after water, causes the phone to reboot.

“Kernel data abort” – CPU Mainly because of the processor blade or the coils along the buck lines. Also in the log, there are sometimes specific lines and elements from the diagrams.

“Missing sensor (s): mic1” – Microphone Often after water or mechanical stress. mic1 is the bottom left microphone. mic2 – next to the flash / flashlight. mic3 – next to the front camera. mic4 is the bottom right microphone.

“SD: 1 Missing sensor (s): Prs0” – Barometer The barometer on the charging port flex is damaged or its line.

“AppleSocHot: hot hot hot” – CPU / CP Met only on iPhone 7 models. Mainly because of the CP

“AppleBCMWLAN” – WF / BT

“AOP PANIC” – Ambiguous error, look for keywords in the log.

“Ememory” – Nand

Mostly on iPhone 5s / 6.

“Anc-postnand.c1260 asser failed link” – Nand

“Stacks + routined” – battery

Found mainly on iPad.

“AGXK AGXAcceletor” – Gyroscope / Accelerometer

“Apcie (0: s3e)” – NAND

“Apcie (wlan)” – WiFi

“Apcie (bt)” – BT

“Sleep wake hang detected” – WF / codec / amplifiers Ambiguous error freezing in sleep mode, look for keywords in the log.

“Nvme” – NAND Nand with PCIE bus.

“Lm3539″ – Backlight Driver On Plus models, to find out which of the two, look in the log for the i2c line.

“Mic-temp-sens2″ – mic2 Microphone next to flash / flashlight. Often found on iPhone 11.

“Kernel instructglon fetch Abort” – CPU Termination of the CPU core.

“SCL display PMU” – Image driver

“GFX GPU” – CPU Cessation of the CPU, only met on iPhone 8 models, often due to words in the board.

“H3K5 Tglon” – Audio Codec / Amplifiers

“SMC PANIC ASSERTION” – Processor / Top Board Met on iPhone X and above models.

“SEP ROM to glon SMC DATA ABORT” – CPU It can also be any item that has certificates.

“EMemory apcie” – NAND

“CP_COM_NORM REQUEST” – CPU / NAND / CAMERA Ambiguous error, search the log for more keywords.

“Dart-dispo SMMU error” – Main camera

“Firmware fatal” – software The flashing helps.

“Initproc exited” – Crystal Oscillator

“Invaild queue element linkage” – NAND

“AGXG10P BO NMI” – Failure of layers in the board Punched sleeves / bushings.

“Apple tristar2″ – Tristar ” Charge controller or its lines between the tiger and tristar.

“PMP NMI FIQ power (1) -failed to transition” – CPU / coils / KP Ambiguous error.

“Void applesynopsysMIPID SIC glontroller” – Front ribbon cable

“WKDMD ERROR code 0x2” – Memory error Get Error 14 (APFS) on firmware,

“Apple PPM” – Lightning / Tristar / Tigris The error occurs while charging.