A1707 Liquid Damage - Stuck at 5V on USB

mikeeok

New member
Hi!
I'm an electronics student from Austria trying to fix a Macbook Pro A1707 from a friend of mine. He took it to an Apple store and they said it is a liquid damage and wanted to charge him 1300€ for a new logic board. Thus, he asked me if I could fix it. I have watched numerous videos from Louis on the "stuck at 5V" topic and started investiagting the issue
Here is a short summary of what I've done so far.

A visual inspection did not gave any obivous hints to a damaged part.
First I've checked the USB port and noticed that it got stuck at 5V and draws approx. 20mA. As suggested in multiple videos, I've measured the voltage rails around the ISL9239.
PPDCIN_G3H = 5V and is present at U7000,
PPBUS_G3H = ~0V

Then I've checked the supply rail of the USB-C port controllers, which was 0V.
--> PP3V3_G3H = ~0V
but the enable signal from U7000, PM_EN_P3V3_G3H was present. Thus, I've checked if PP3V3_G3H is shorted, which it was. As suggested in a video by Louis, it is very likely, that a CD3215 is responsible for this short, UB300. Thus, I've supplied 3.3V into the PP3V3_G3H rail and identified the faulty CD3215 with the "alcohol on chip" method. Then I desoldered this chip and the short on PP3V3_G3H was gone. I ordered a replacement and soldered it in.
However, the issue remained. The two ports, including the one I've fixed, stayed at constant 5V/20mA, but the other two ports did power cycle like in this video.
Louis replaced the TB SPI Flash chip in this video and resolved the issue. I was not sure if a fresh chip from Mouser will do the job or if it needs some pre flashed data. Anyway, I ordered fresh SPI Flash chips and gave it a shot. After I've desoldered U2890, these two USB-C ports did not power cycle any longer and this behavior persited after I soldered the fresh chip from mouser.

However, I've got stuck at this point and would need some further advice. First I've thought that the ISL9239 could be the problem, as PPBUS_G3H is not present, I've replaced it but it did not change anything. Could there be another faulty CD3215 or could it be a faulty SMC chip?

Board Rev.: 820-00928-A

Thanks in advance!
Kind regards
Michael
 

2informaticos

Administrator
Staff member
First of all, welcome to the forum!

Put back U2890, it has firmware.

You said liquid damaged board, but ehere???
Do you get 3V3_G3H after replacing one CD3215 chip?
Did you solder CD3215 with the same code termination (C00, B03)?
Compare diode mode readings on all LDO rails for all CD3215 chips.

If battery still holds some charge, check if board starts on battery alone.
Be aware, need to press power button in this case; use SW5200 pads instead.
 

piernov

Moderator
Staff member
Don't touch the side that's power cycling, it's fine. It's the other side that's stuck at 5V without cycling that's causing trouble.
 

mikeeok

New member
Thanks for the quick reply!

I put the original U2890 back and this side power cycles again.

Regarding the liquid damage, Apple claimed this and my friend told me that he spilled some beer over it, one year ago. After that, the machine worked but stopped working a few weeks ago. Since then, it won't boot.

3V3_G3H is present, ~3.4V
I ordered the exact same replacement, C00.

Supply/LDO Rails - Diode Tests:
UB300
CB300: 3V3_G3H: Diode-Mode: 1.196V
3V3_G3H: 3.40V
Diode Test on LDO Rails:
PP3V3_UPC_TA_LDO: on CB308: 1.405V
PP1V8_UPC_TA_LDOA: on CB306: 1.313V
PP1V8_UPC_TA_LDOD: on CB305: 1.305V
UB400
CB400: 3V3_G3H: Diode-Mode: 1.196V
3V3_G3H: 3.40V
Diode Test on LDO Rails:
PP3V3_UPC_TB_LDO: on CB408: 2.249V
PP1V8_UPC_TB_LDOA: on CB406: 1.219V
PP1V8_UPC_TB_LDOD: on CB405: 1.128V
U3100
C3100: 3V3_G3H: Diode-Mode: 1.196V
3V3_G3H: 3.41V
Diode Test on LDO Rails:
PP3V3_UPC_XA_LDO: on C3108: 2.269V
PP1V8_UPC_XA_LDOA: on C3106: 1.226V
PP1V8_UPC_XA_LDOD: on C3105: 1.23V
U3200
C3200: 3V3_G3H: Diode-Mode: 1.196V
3V3_G3H: 3.41V
Diode Test on LDO Rails:
PP3V3_UPC_XB_LDO: on C3208: 1.404V
PP1V8_UPC_XB_LDOA: on C3206: 1.265V
PP1V8_UPC_XB_LDOD: on C3205: 1.264V

Unfortunately, the battery is empty, I got 0V when I measured the two pads which connect to J6950.

Thanks!
Michael
 

2informaticos

Administrator
Staff member
Looks to have a problem with U3200.
Its PP3V3_UPC_XB_LDO has much lower value than rest of the chips.

You forgot to check 1V1 LDO, which is the most important.

BTW, any reason to check 3V3_G3H in so many points?
Do you really expect to get different values in the same rail???
 

mikeeok

New member
Sry, here are the values for the 1V1 LDO rail:

PP1V1_UPC_TA_LDO_BMC: on CB304: 1.816V
PP1V1_UPC_TB_LDO_BMC: on CB404: 2.685V
PP1V1_UPC_XA_LDO_BMC: on C3104: 2.705V
PP1V1_UPC_XB_LDO_BMC: on C3204: 1.817V

So that means U3200 and the one I've already replaced UB300 are faulty. Could it be that I've messed up some connections of the UB300 while soldering, or do you think it is dead?

Just wanted to document that the rail is available for all the four chips, would not expect any different values..
 

2informaticos

Administrator
Staff member
"I've messed up some connections of the UB300 while soldering"
Do you have now some bad solders/traces there???

Please, do not write the end "V", when you post diode mode reading.
We don't need more confusion.

And re-check all the values.
Keep in mind, ALWAYS connect red probe at ground for diode mode!!!
 

mikeeok

New member
" "I've messed up some connections of the UB300 while soldering"
Do you have now some bad solders/traces there??? "
No, I meant that there might be some shorted pads under the BGA.

Thanks for the advice on the diode mode reading, did wrong before. Here are the new values:
Diode Test on Rails, "red" --> gnd, "black" --> rail
UB300:
PP3V3_G3H: 0.350
PP3V3_UPC_TA_LDO: 0.505
PP1V8_UPC_TA_LDOA: 0.517
PP1V8_UPC_TA_LDOD: 0.481
PP1V1_UPC_TA_LDO_BMC: 0.504
UB400:
PP3V3_G3H: 0.350
PP3V3_UPC_TB_LDO: 0.501
PP1V8_UPC_TB_LDOA: 0.514
PP1V8_UPC_TB_LDOD: 0.477
PP1V1_UPC_TB_LDO_BMC: 0.500
UB3100:
PP3V3_G3H: 0.350
PP3V3_UPC_XA_LDO: 0.500
PP1V8_UPC_XA_LDOA: 0.512
PP1V8_UPC_XA_LDOD: 0.467
PP1V1_UPC_XA_LDO_BMC: 0.498
UB3200:
PP3V3_G3H: 0.352
PP3V3_UPC_XB_LDO: 0.503
PP1V8_UPC_XB_LDOA: 0.513
PP1V8_UPC_XB_LDOD: 0.478
PP1V1_UPC_XB_LDO_BMC: 0.497

Thanks!
 

2informaticos

Administrator
Staff member
Values look very similar.
Please, STOP to check the same rail in different points (3V3_G3H).

You must be sure UB300 is correctly soldered.
Also be aware of fake chips from chinese sellers...
 

mikeeok

New member
Check the voltage on the LDOs as well.
The 3V3 and both 1V8 LDO rails are ok on all four chips, but the 1V1 rail is missing on all of them. Do you think that all four chips are faulty, or could it be the capacitors that are connected to these rails?

Also be aware of fake chips from chinese sellers...
I bought my replacement from a german macbook/iphone repair shop and it came in a sealed cut reel strip, so I guess they are ok, but you never know..
 

mikeeok

New member
I've checked all the 1V1 LDO rails again, with the charger on each port. The U3100 and U3200 are fine, they power cycle and I've measured 1.1V on each 1V1 LDO rail. However, the 1V1 LDO rail is missing on the other two CD3215 (UB300, UB400). So I guess they are both faulty. Even the one I've replaced. Do you have any suggestions on where to buy good CD3215C00 chips? Shipping costs from the US (store.rossmanngroup.com) are fairly high, but if there aren't any alternatives, I would go for it.
 

piernov

Moderator
Staff member
UB300/UB400 work in master/slave mode. The master CD3215 (UB300) must be able to read the firmware from the TBT ROM (UB090) for its 1.1V BMC LDO to come up and then USB-PD negotiation to start. The slave CD3215 (UB400) gets the firmware from the master CD3215 (UB300). So if UB300 doesn't work, UB400 won't work either. (I'm not sure if UB400 could cause UB300 not to work but it's a possibility.)

In any case it's most likely just bad CD3215.
 

mikeeok

New member
Wing boards have finally arrived, any tips on how to proceed? They seem to have some "underfill". My plan would be to fix UB300 first, replace it with a reballed replacement chip and check for the 1.1V BMC LDO.
 
Top