https://4pda.to/forum/index.php?showtopic=831264&st=740#entry83723494
pics with test-point pins. in thread written and method for using it. for breaked phones. ill find it later.
1 Like
Oh, this requires some knowledge and experience: On some smartphone âmotherboardsâ (= Printed Circuit Board (PCB)) the bus to the internal FLASH-memory chip (eMMC or a more modern bus like toggleNAND, UFS / M-PHY, NVMe etc.) is accessible via so called test-points (usually labelled TP1, TP2, ⌠on the PCB). This enables to re-flash the FLASH memory without de-soldering it (which is nearly impossible with BGA chips on a densely packed PCB); still one must know exactly how to do this, i.e., which bus is used, have a programmer (a piece of hardware) for this type of bus, how to use this stuff etc.
look at pic in link about. in this case test-point pins easy accessibly right at phone back. but I canât make right process (as we says in Russian my hand is crooked).
The picture shows only two contacts (the ones encircled in green), which appear to be contacts exposed by a regular microSD card or some kind of adapter being inserted in the microSD slot.
IMO two contacts are not sufficient for flashing!
It is not sd card or something else pins. sd card inster deeper. Ya may put cover off to look at this.
Yeah, lots of them. 
Which of it is Test-Point pins?
All, respectively none of them! 
Seriously, real test-points would be labelled TPx.
What you see are five groups of pads:
- The two pads in front of the SD-card slot:
BOOTandBOOT-PWR(boot power) - Four pads to the right of the internal SIM-card slot:
GND(ground),DN(D-),DP(D+) andVBUS(bus voltage)
This is most likely a USB 2 port, if you measure betweenGNDandVBUSwith a multimeter, there should be ~ 5 volts. - Three pads in front of the camera module:
TX(transmit),RX(receive) and GND
This is a serial interface, most likely RS232-alike. The issue with serial interfaces of smartphones is, that you donât know (without documentation), which voltage levels it is using (sure not the specified +12V / -12V, but it can be +5V / 0V, +3,3V / - 3,3V etc.), and if the signals on Rx & Tx are inverted or not. - Behind the battery connector, there are
VBAT(battery voltage),GNDandTEMP(temperature, which is connected to a PTC resistor to measure the batteryâs internal temperature).
These pads are directly connected to the three pins of the battery connector. - There are three more pads slightly hidden under the flat ribbon cable in the small connector to the right: I can read
PWK, but not the other two, and have no idea what they are for.
As the device is currently under the control of an MDM (mobile device management), and you do not seem to have a way to ask it to be switched off, you are looking for a way to re-flash it. Either of the first three groups of pads (the USB-port, the serial interface and the two boot-pads) may provide a way to achieve that, but it has to be properly documented. If you are doing something wrong (e.g., applying a too high voltage to the Rx pad, but you donât know what constitutes âtoo highâ without documentation) you might hard-brick the device (i.e., destroy its electronics). The safest of the three is the USB interface: You may connect it to a computer and see what is there (e.g., by lsusb on Linux); still you would have to have an idea what to do with the USB-device (maybe it replies to fastboot run on an attached computer).
HTH
1 Like
So I canât enter Aurora phone into EDL nor via fastboot nor by buttons nor with a EDL cable. Its says:
D:\adb>./fastboot oem edl
FAILED (remote: 'emergency dload mode not supported')
in 1st case and
No DLOAD supported - boot into fastboot mode
in 2nd case.
With ED cable when it short it wont start and when unshort its in bootloop.
So I give up.
Itâs DOWN, UP, PWR key. And nothin more. And there is no any pins on backside.
There is two unmarked pins left of external mic btw. Its smaller than usual pins.
Anyway nothing helps. Short circuits those two have no effect. Phone start to bootloop after connect to PC with no battery in any case.
I have not read the guidance in the 4pda.ru forum: Does it suggest to short-circuit BOOT and BOOT-PWR? Is that what you are talking about?
No DLOAD supported - boot into fastboot mode
If you manage to enter fastboot mode, you have achieved what you want: By fastboot boot <recovery-image> you can enter recovery mode and by fastboot flash (needs some more parameters) flash partitions on the phone. First you can check by fastboot status if then phone is locked etc. You will find the fastboot documentation with all its command somewhere.
In general you were about to start a little reverse engineering: This takes patience, a some of searching the WWW (again and again), the will to learn something, trying things systematically and endurance.
But at least you have an extra display, battery and enclosure for your other Inoi R7.
Not really. The pics with BOOT BOOT-PWR posted as Test-Point EDL. With no guidance. But I short and this both pins and unmarked pins I have found. With no effect. The phone only bootloop. I tried with batt and with no batt. The same shit. The problem that all guys who were in thread r no longer maintain it. And I suppose some of them may leave Russia. Any attempt to ask OMP is useless. They say nothing at all. Just wrote we can not help ya. That is it. Well heck with it. I left it as donor. I have poor skills and reverse engineering is not my way.
It enter fine into fastboot with Volume UP + Power. But I suppose boatloader is locked. And EDL with Test-Point is the only way.
You can check that via fastboot, just to be sure that you did not miss a simple route when giving up now.
Show me correct syntax please
Shorting random pins is not a good idea in any case.
3 Likes
Ya right but this one item is for testing as I canât use it in another way.
1 Like
Ok guys today is update session day. As @olf ask me to check. Starting from 4.1.0.24 to current one 4.5.0.24. At least Iâll try it.
Well⌠at 4.2.0.21 camera wonât run. As well as some (lotta) apps. Its just close right after startup or after few seconds while trying to open (as camera). Wft?
I use sfos-upgrade script. All process ends fine. As well as postupgrade stage.
Wont run almost all preinstalled apps, incl jolla store, browser, camera etc. even store-man is broken. Terminal is alive. How to roll it back? I canât even open setting GUI.
1 Like
Have you been installing Gstreamer from openrepos?
No i didnt. Its nowhere written as requirement. What is it n how to install witihn term?
This is good. Do not install it.
Try to run âbrokenâ app from CLI and observe an error.
1 Like