Advantest R3273 / R3267 Repair - Page 1
Forum section: electronics / repair

author: chick0n
author_rank: Regular Contributor
timestamp: September 06, 2022, 08:13:53 pm
content: This first problem is solved, or where non existant.Scroll down for more problems.

author: chick0n
author_rank: Regular Contributor
timestamp: September 07, 2022, 06:39:15 am
content: Some Pictures:https://ibb.co/album/xqNvf6Some stuff I found out: (With help of other people on the Forum)- After you Disconnect / Change the NVRAM Lithium battery, the trace wents to the top of the LCD in full span mode.Solution: You have to turn off the analyzer and hold the "." dot key, while turning on, during the whole bootup process. This initializes the NVRAM, and everything is back to normal.- When you want to use a new CF card, you need a 8 or 16MB card, and format it with this tool:https://www.sdcard.org/downloads/formatter/Then copy the files on it. Nothing else worked for me.- After pressing: "Shift + Format + 882323 + Hz", you can reset "ATT switch count" and "Power ON switch count".- After pressing: "SHIFT + WINDOW + 882323 + Hz", you enter the calibration menu, where you can read/write/tweak every calibration value. So you dont need some unobtainium PC Software like with R&S Machines. (Thank you AdvantestWhen you want to save the changes to the EEPROM, you need to remove the small backplate assembly, with the 4 screws. There is a DIP Switch, where you can turn EEPROMWRITE on.- Pressing SHIFT + TRANSIENT will also ask for a password, but it is not known yet. I think this is the access to the debug mode. I found some interesting strings in the firmware:DFM.txt: --- Read memory ----------------DFM.txt:DFM.txt: DEBUG MODEDFM.txt: TBC SEND 595DFM.txt: TBC SEND DACDFM.txt: TBC SEND DAC 500DFM.txt: TBC SEND CXDDFM.txt: TBC SEND 87086/16DFM.txt: TBC SEND 87086/20DFM.txt: TBC SEND AD7008DFM.txt: TBC READ 0831DFM.txt: TBC EEPROM WRITEDFM.txt: TBC EEPROM READDFM.txt: TBC SRAM WRITEDFM.txt: TBC SRAM READDFM.txt: DEBUG MODEDFM.txt: StandardDFM.txt: TBC|Send xxxDFM.txt: TBC|Read 0831DFM.txt: TBC|EEPROM xxxDFM.txt: TBC|D.P.M xxxDFM.txt: returnDFM.txt: STANDARDDFM.txt: ACTIVEDFM.txt: address| writeDFM.txt: FORMATDFM.txt: Hex|DecDFM.txt: SIZE TYPEDFM.txt: 8|16|32DFM.txt: Read LoopDFM.txt: Write LoopDFM.txt: returnDFM.txt: SEND 1/2DFM.txt: TBC|Send 595DFM.txt: TBC|Send DACDFM.txt: TBC|Send DAC5DFM.txt: TBC|Send CXDDFM.txt: TBC|Send 7008DFM.txt: next menuDFM.txt: returnDFM.txt: SEND 2/2DFM.txt: TBC|Send 87086|/16DFM.txt: TBC|Send 87086|/20DFM.txt: prev menuDFM.txt: TBC EEPROMDFM.txt: TBC|EP WriteDFM.txt: TBC|EP ReadDFM.txt: returnDFM.txt: LOCAL BUSDFM.txt: TBC|SRAM WriteDFM.txt: TBC|SRAM ReadDFM.txt: returnDFM.txt: DEBUG TBCDFM.txt: ACTIVEDFM.txt: address| writeDFM.txt: Write LoopDFM.txt: returnDFM.txt: DEBUG TBCDFM.txt: ACTIVEDFM.txt: address| writeDFM.txt: Read LoopDFM.txt: returnDFM.txt: DEBUG TBCDFM.txt: ACTIVEDFM.txt: ID |sorc|dest|sizeDFM.txt: ExecuteDFM.txt: returnI searched all firmware files for the passwords, but could not even find "882323", which is the same as for the R3131A.I wonder how they are encoded?- There even exist a tool on the cf card (TBC.X), to read/write the calibration values as .csv files. But I dont know how to execute it. (Maybe through Debug Mode)I attached my CF-Card content, and I even Read out the TSOP Flash-EPROM on the CPU Board. Maybe anyone can find the Debug mode password.The Operating System is called VRTX-32 from Mentor Graphics. I think the kernel runs on the Flash-Eprom, and the executables are on the CF-Card.Also VRTX runs the Hubble Space Telescope.CF Card Content:https://drive.google.com/file/d/1XZMoc3Zd86UlXWMjUhN6VH5KTtQ_qpTr/viewAlso: Broken TG Fix:Oh Boy....

author: chick0n
author_rank: Regular Contributor
timestamp: September 08, 2022, 06:54:20 am
content: Other Problems:The -10dbm 30MHz Calibration Signal is OK. But when I connect it to the input, the analyzer reads it as 0dbm. This is only in the first minutes of operation, when the analyzer is still cold.When the analyzer is warming up for a few minutes, suddenly the noisefloor drops a little bit, and the 30MHz signals then gets read as about -37dbm.Both readings are either too high or too low, to be recognized in the calibration routine or selftest.Sometimes the calibration routine catches the signal, and tries to calibrate for a few seconds. But then it freezes. and I have to press preset to reset the analyzer.When the selftest catches the signal, everything fails, except the CPU and Synthe Block test.When I look in the maintenance menu, at the system status, it complains about the RF and IF Output level. (See Photo)Ignore the "Reference PLL" failure, I got that fixed already...Also the Option 01 DSP Board doesnt get detected. But maybe it is really broken, and this isnt a bus communication error. I will try to deactivate this option, since its "only" a Signal Analyzer for old Mobile Standarts like cdma2000 and stuff....

author: chick0n
author_rank: Regular Contributor
timestamp: September 08, 2022, 06:13:17 pm
content: I investigated a little bit further today, and tested the IF / Mixer stages.I set the analyzer to zero span, and injected a 21.4MHz signal (3rd IF) into the IF Card. The dbm level reads about right.Then I injected 421MHz (2nd IF Signal) into the 3rd Mixer. The level reads ok too.Then I injected 4231.4MHz (1st IF Signal) into the second mixer. And there the strange behaviour begins to show. The signal level degrades over the course of a few seconds.So the problems seems to lay in the 2nd Mixer. I treated the area with cooler spray and heat, but nothing changed.Maybe the problem lays in the steering of the mixer on the underside of the RF block.The PLL seems to work...Maybe its a digital problem...

author: chick0n
author_rank: Regular Contributor
timestamp: September 09, 2022, 08:57:30 am
content: Also the last owner soldered around Q100. This is the amplifier stage for the 1st IF Signal.The gaasfet looks like a NE32584C, so I ordered a new one.

author: AJ3G
author_rank: Regular Contributor
timestamp: September 09, 2022, 09:46:00 am
content: That is some poor soldering technique the previous technician used!Great Posts, I have a 3267 here that has a sick TG. Need to see what is going on with it. Keep up providing this information, it’s very useful!Rich

author: chick0n
author_rank: Regular Contributor
timestamp: September 09, 2022, 12:26:06 pm
content: Quote from: AJ3G on September 09, 2022, 09:46:00 amThanks.Maybe you could take the measurements i mentioned in the first post for me?The Cpu Boards of R3267 / 73 are the same.

author: chick0n
author_rank: Regular Contributor
timestamp: September 13, 2022, 07:57:20 pm
content: WOW...I got a BIG Problem solved today.It seems the "Filter Board" is broken. (See Picture)While checking the analyzer, and whiggling around the connectors, I accidentally short-circuited the filter board, which completely destroyed it. (The 30MHz peak was very small now, around -70dbm instead of -10)First I thought, this is game over for this analyzer now...Then I found out, you can bridge the filter board completely. I think the Board filters the supply voltages and some signals to the RF Block, I think. The RF-Block has two 10Pin connectors for the filter, which are the same. So you can put in a jumper cable.I turned the Analyzer on, and:30MHz Signal is strong now.- CAL-Routine passes completely, without freezing.- Selftest passes completely, without errors.- DSP-MOD Board gets detected.3 problems solved.The 30MHz -10dbm cal signal reads as -6dbm, after calibration. Which is a highly accurate reading for this mess of an analyzer...Tomorrow I will make further tests.I dont know how, and what this Filter actually Filters.It consists of 4 AD822AR OP Amps, 3 2sd1584 NPN Transistors, and 3 2sa1615 PNP Transistors.One 2sd1584 is broken, and some ADs too, because they get hot.You can still buy the ADs, but the Transistors are almost unobtainium.

author: dxl
author_rank: Regular Contributor
timestamp: September 13, 2022, 08:15:16 pm
content: Quote from: chick0n on September 13, 2022, 07:57:20 pmMaybe this is just a voltage regulator board? At least the combination OPAMP - (bigger) Transistors and Caps make me suspect that.

author: chick0n
author_rank: Regular Contributor
timestamp: September 14, 2022, 12:01:15 pm
content: Maybe it regulates the voltages slightly, to keep it constant and precise for the RF-Block.Also the PCB is mountet behind the front panel. Away from heat sources.

author: chick0n
author_rank: Regular Contributor
timestamp: September 14, 2022, 07:42:31 pm
content: I played a little bit more today.I first thought, the High Band Mixer (TOP2301) is completely toast. This little block is responsible for the 3.5 to 26.5GHz range.It is a combined YIG Filter and Harmonics Mixer. It can also pass through the low band (100HZ to 3.5GHz). It mixes the High Band right down to 421MHz.I got very low readings from 4 to 8GHz, and nothing beyond that, at first. After twiddling around in the maintenance menu, I now get strong peaks from 3.5 to 26.5GHz. Not correct readings, but I can "see" up to 26GHz now.It seems, the mixer was a little bit out of calibration, or some previous owner swapped it.Non the less, a good calibration manual for the R3273 would be nice to have...

author: chick0n
author_rank: Regular Contributor
timestamp: September 16, 2022, 07:51:51 am
content: I examined the "Filter" board some more.Its really are "just" 6 Voltage Regulators.It takes +12.6V and -12.6V at the Input, splits it to 3x +12.6V and 3x -12.6V, to each Regulator.At the Output, I get 6 times +-11.7 Volts.One 12V Voltage is missing, because the Transistor is broken. And one AD822 gets really hot. I will try to repair it. Or maybe build a new one?Maybe Advantest calls it Filter-Board, because the Voltage stays about the same, but the output is more clean and stable.Also, I fine-tuned the YTF. I get constant readings now, on the full range to 26.5GHz.The Amplitude still reads too high, but hey...

author: dxl
author_rank: Regular Contributor
timestamp: September 17, 2022, 08:45:42 am
content: Quote from: chick0n on September 16, 2022, 07:51:51 amI would have tried to repair the board first before doing any adjustments - are you sure that the YTF adjustment is wrong? Maybe the values it depend on the addtional voltage drop from the regulator? Do you still have the original values?

author: chick0n
author_rank: Regular Contributor
timestamp: September 17, 2022, 04:00:12 pm
content: Quote from: dxl on September 17, 2022, 08:45:42 amYes...I made photos of almost all calibration values.With the password for the Debug Mode, one could save calibration values as .csv files. And save as backup, or edit in excel. That would be really cool...

author: chick0n
author_rank: Regular Contributor
timestamp: September 19, 2022, 11:00:01 am
content: Yesterday the CPU-Board died again.I guess it has been Resoldered too often.So I need to wait till someone sells me an R3267 / 73 CPU-Board. Or wait till a parts Machine pops up.

author: chick0n
author_rank: Regular Contributor
timestamp: September 21, 2022, 04:16:13 pm
content: After some Reflowing, the CPU-Board is Booting again.But now, the Amplitude problem is showing again.When the Analyzer is cold, it shows the -10dbm cal signal as +2dbm, thats too much for the cal routine.After warm up, the whole Trace on the LCD drops (Not just the Peak getting smaller), and shows the signal as -22dbm.Whats really weird is, that the drop only shows after preset, or reboot. Which makes debugging extra hard...I measured the converter stage outputs again, after cold and warm (preset) state.1st converter cold: -21dbm, warm: -20dbm2nd converter cold: -18dbm, warm: -15.4dbm3rd converter cold: +6,2dbm, warm: -21.8dbm (wow)

author: chick0n
author_rank: Regular Contributor
timestamp: September 22, 2022, 08:02:26 am
content: Further investigation:I dont think, the 3rd converter is broken. (Would be too easy)Theres some gain control voltage for the 3rd output transistor, that looks fishy.Voltage Cold: -5V (Shows +2dbm on analyzer)Voltage Warm (after Preset) -1,6~V (Shows -22dbm on analyzer)When I disconnect cable to the transistor, Voltage is -12VWhen I put in about -3.3V, from external power supply, analyzer shows -10dbm. The Cal Routine almost passes, but fails at the end. (She wants to adjust the control voltage herself?)The control voltage comes from the underside of the RF-Block, which makes debugging extra hard....

author: chick0n
author_rank: Regular Contributor
timestamp: October 05, 2022, 06:16:18 pm
content: I have the sneaking suspicion, my attenuator is crimped wrong.The Owner before me replaced it, and it works. But hmm...Does anyone have a picture from the underside of the R3273 RF-Deck?

author: serg-el
author_rank: Regular Contributor
timestamp: October 08, 2022, 03:21:53 am
content: No photos. Calibration guide is available.https://cloud.mail.ru/public/gG8r/DzJXmPxig

author: chick0n
author_rank: Regular Contributor
timestamp: October 14, 2022, 11:05:16 am
content: Ok..false alarm. The attenuator is connected correctly.And I have working CPU-Board now.The fix for "-10dbm CAL Signal showing as -40dbm on the analyzer", is bridging the Voltage Regulator, for now. (The RF Block gets 12.7V instead of 11.7V). Something seems to have degraded in the RF-Block over the years. And its not the Electrolytics, I changed every one of them. Made no difference.For me the Signal was still a little bit too low, to start calibration. Theres a 2db Attenuator in the RF input path (before the 3,6GHz Low Pass Filter), that I replaced with a 1db one. Now everything seems works fine.I have to let the analyzer heat up for at least 30min before doing calibration or measurements.

author: jjoonathan
author_rank: Frequent Contributor
timestamp: October 15, 2022, 01:59:31 am
content: Hi! Glad to see I'm not the only one to experience the BROKEN tracking generatorAs for the underside of the RF deck, I do have pictures, because that's where the frequency response calibration EEPROM is. I also have a python class that knows how to read and write frequency response calibration values. Here:https://www.dropbox.com/sh/duiwlludrlxyala/AACnrKwy0W6_VMswptNcmWIVa?dl=0The RF deck EEPROM is in a really obnoxious location, so it would be nice if you figured out how to do it through GPIB instead. The most promising lead I know on that front is the $R/$W GPIB commands from the older R3371. The Advantest mailing list figured them out after I did things the hard way, of course -- but maybe they can help you!Code:# $R is READ# $W is WRITE https://groups.io/g/advantestinstrument/message/1545allData = b''print('Start reading %s words' % n)for a in range(0, n):address = str(format(start_adr+(a * 2), '02x'))data = Device.query('$R%s' % address).strip("\n")print(address, '\t', data)allData = allData + binascii.unhexlify(data.strip())Program to concatenate:https://groups.io/g/advantestinstrument/message/1526EDIT: fix link

author: chick0n
author_rank: Regular Contributor
timestamp: October 15, 2022, 05:52:27 pm
content: Quote from: jjoonathan on October 15, 2022, 01:59:31 amFor the R3273, its little bit different.There are two Hidden Menus. In one menu, you can tweak the calibration values directly from the front panel. For this menu, the Password is known.The other one is the Debug Menu, with this you can read and write the whole memory map. And you can save the Calibration Values as .csv files on the CF-Card. (every module in R3273, has its own eeprom with cal values). Unfortunately, the Password for the Debug Menu is not known yet, so no one was able to test this yet."csv" sounds like, the analyzer converts the eeprom content directly into human readable form.The passwords for the menus are not stored in ASCII form, but encoded with alghoritm? Decoding this exceeds my skills....

author: jjoonathan
author_rank: Frequent Contributor
timestamp: October 15, 2022, 09:58:49 pm
content: I never figured out the second password, but I did calibrate the frequency response on two R3273s with r3273.py. It works.

author: chick0n
author_rank: Regular Contributor
timestamp: October 16, 2022, 04:30:24 pm
content: Quote from: jjoonathan on October 15, 2022, 09:58:49 pmSorry... i didnt see the dropbox link first.That looks very helpful. My r3273 could use a Step Attenuator calibration too. But I have to figure out how to get this running...Also, the Attenuator crimping looks identical to mine. Thanks.

author: Gyorgy Albert
author_rank: Contributor
timestamp: October 23, 2022, 12:51:35 pm
content: Hi folks,I sketched some time ago the schematic of the BLC024864, I attached it as a pdf file. It is not looking very nice, but at that time it was good enough for me to repair mine. It si a simple voltage filter, which makes silent power supply lines for the RF part. In my unit, one 39 kOhm divider resistor was simply interrupted. It is not exposed to high voltages or currents, it simply gives up. After replacement all my RF voltages were fine. But as it was stated above, I also skipped the filter board as a first step, and looped the voltages back to the RF module. Just after that I started to find the problem on the module itself.My R3267 units have flash ROMs, and no CF cards inside. The main CPU boards are different from the R3273, which indeed has the firmware on a CF card (pictures of the two sides of one of my R3267 attached).@Chick0n: if you need some measurements on the main CPU boards connectors/interfaces, please let me know. I will try to do them in one of the following weekends.BR,Gyorgy

author: chick0n
author_rank: Regular Contributor
timestamp: October 23, 2022, 04:47:39 pm
content: Quote from: Gyorgy Albert on October 23, 2022, 12:51:35 pmThanks for the Schematic!Do you Measure the same Voltages as me on the Voltage Filter? About 12.7V Input and 11.7V Output?

author: chick0n
author_rank: Regular Contributor
timestamp: October 27, 2022, 06:30:43 pm
content: After Disassembling the MAINTE.X, I found 3 ocurrences of "882323":ROM:0000D016 cmpi.l #882323,0(a0)ROM:0000D0C0 cmpi.l #882323,0(a0)ROM:0000D184 cmpi.l #882323,0(a0)One for each hidden menu? Except, for "SHIFT + Transient", nothing happens.So maybe the Password is Correct, and something is missing for triggering the debug menu, or the menu gets triggered somewhere else?

author: Gyorgy Albert
author_rank: Contributor
timestamp: October 27, 2022, 06:44:33 pm
content: Maybe a dipswitch setting is required ( under the backplate). The eeprom write must be also enabled by a dipswitch, so this could be similar. You have a Write protection in the software menus, but it will work only if the dipswitch is set. It worth a try using the unknown dipswitch items. Some are already identified, if I remember, one or two are used to route different signals to the backpanel BNC socket. So the remaining could be what we are looking for.

author: chick0n
author_rank: Regular Contributor
timestamp: October 27, 2022, 06:58:00 pm
content: Quote from: Gyorgy Albert on October 27, 2022, 06:44:33 pmAlready tried the dip switches on cpu board and backpanel.

author: Gyorgy Albert
author_rank: Contributor
timestamp: October 27, 2022, 07:07:13 pm
content: Maybe a floppy disk must be inserted and detected by the system. Just a thought.

author: chick0n
author_rank: Regular Contributor
timestamp: October 27, 2022, 07:09:31 pm
content: Quote from: Gyorgy Albert on October 27, 2022, 07:07:13 pmyep...I thought that too...Also, when you switch dip switch 1 on the cpu board on, it asks for a boot disk.

author: Gyorgy Albert
author_rank: Contributor
timestamp: October 27, 2022, 08:03:15 pm
content: I double checked the backpanel dipswitch. Only 1,5 and 6 are used, the others are not connected. So there is nothing else to look for here, we know the functions of these settings ( it is marked in fact on the silkscreen of the printed circuit board BLC-024514). The conditional access to the special menu is hidden somewhere else. Maybe a floppy disk with some special content is needed ( not a boot disk, since we are looking for some software option settings, and maybe the disk should contain some option files, which should be transferred in this menu to the compact flash, or flash memory in the case of analyzers without compact flash).In one of the other topics related to the R3273, someone wrote about a serial port available on the main CPU board( some messages were listed during the ooer up). Maybe this can be used as a terminal, and there you can send special maintenance commands. However, all these should work also over GPIB.

author: chick0n
author_rank: Regular Contributor
timestamp: October 27, 2022, 09:01:22 pm
content: I connected to the J12 connector on cpu board. Pin1 is TX, 2 maybe RX?, 3 GND, rest is GND and 5V.I was never able to send commands.I received some boot messages, and when the analyzer is bootet up it writes SD:/SD:/SD:/SD:/SD:/SD:/SD:/SD:/ over and over again...When I type "shift + window + 882323 + hz", it sends "CW KEY SET" over rs232.When I type wrong password, nothing...In the MAINTE.X, I found Strings:CW KEY SETCW KEY DELDFM KEY is Invalid.DFM KEY is not Delete.

author: Gyorgy Albert
author_rank: Contributor
timestamp: October 27, 2022, 09:25:17 pm
content: The serial port will be good for monitoring/debugging. Whe you try the hidden menu SHIFT + TRANSIENT +882323+Hz, does it report anything on the serial? I have to connect my analyzer to a serial port in the weekend and play a bit. Are there any other operations ( for example in the maintenance menues) reported over the serial?

author: chick0n
author_rank: Regular Contributor
timestamp: October 28, 2022, 07:20:46 am
content: I also found, the DSP-Board has a own Maintenance Mode. But I dont know how to access.

author: chick0n
author_rank: Regular Contributor
timestamp: October 28, 2022, 03:16:21 pm
content: I checked on the low signal problem again.Everything is back to stock...Voltage Regulator is in...I applied -10dbm CAL Signal to analyzer input, set analyzer to zero span... shows as -50dbm on analyzer.I disconnected the connection between 1st mixer output and 2nd mixer input. Then I connected Power Sensor to 1st mixer output. Shows about -13dbm at 4,3GHz....Then I set microwave source to 4,3GHz -13dbm, and injected to 2nd mixer input. Analyzer Shows -13dbm correctly.Then I reconnected 1st mixer to 2nd mixer. Analyzer shows -50dbm again...I dont know whats right or wrong in this world anymore...

author: Gyorgy Albert
author_rank: Contributor
timestamp: October 28, 2022, 04:05:59 pm
content: Your power meter is a broadband device, I mean it is not a selective receiver. You can measure the -13 dBm level, but it does not mean that the carrier frequency which cames out from the 1st IF it is there where it should be (a relatively small frequency deviation could be enough, to measure a low level. Of course all these will also depend on the selected RBW). Try to feed from the external generator (which preferably is connected to the same reference clock as the analyzer) a 30 MHz -10dBm signal to the input of the analyzer. If this works, and you will measure a correct level, it means that your 30 MHz CAL signal is out of sync, and it is not at 30 MHz (which would be a bit strange). If this doesn't work either, than you might have a shift in the frequency of the first local oscillator. Which is possible, even if it seems locked. The phase lock of the YIG is a multi loop PLL, with several conversions, and if you change some settings in the maintenance mode, you can easily detune it (and will be locked to a shifted frequency. But if you have not changed the settings in the maintenance mode, this should not be the case). So you have to find out 2 things: if your CAL signal is sharply 30 MHz, and if your 1st LO is spot on the right frequency. They both are locked to the 10 MHz reference frequency.Also please note: The 4.1 GHz IF is used only for the low frequency band (if I am right below 3.5 GHz). For higher frequencies it is skipped, and the IF is directly 421 MHz. Eventually, check the RF path measured level, with some RF signal in the higher bands (above 4 GHz). Just to be sure, that this path which does not use the 4.1GHz IF is working or not.

author: chick0n
author_rank: Regular Contributor
timestamp: October 28, 2022, 07:50:24 pm
content: Youre right, with Power Meter I measure all "Peaks" in the Spectrum at the same time... Also I "misused" the Scalar Detector of my Marconi 6203 as Power Sensor, because it is more Sensitive.I checked the cal signal with a good analyzer. Its OK.My freq. Counter and Microwave source are synched to the R3273 Ref.I connected the 1st mixer IF out to the counter, it measures exactly 4.23154GHz. So the strongest Peak on the 1st mixer output seems about correct. (Service Manual says 1st IF is 4.2314GHz)Also, the "torque" of the screws on the 1st mixer lid make a difference in output power. All screws tight = -23dbm. Loosing some screws = -13dbm. Lid open = -27dbm.

author: chick0n
author_rank: Regular Contributor
timestamp: October 29, 2022, 08:50:30 pm
content: Ok...I measured again with the 4.5Ghz Low Pass Filter in place at the IF Out.I think, what happens is, sometimes the counter catches the YTO-LO frequency at the IF Out (~4.26142GHz), and sometimes it catches the IF frequency (4,23154GHz).The Power Sensor measures both, and maybe more Mixer Products...The IF gets filtered better at a later stage, with a Bandpass Filter.

author: chick0n
author_rank: Regular Contributor
timestamp: October 30, 2022, 06:35:43 pm
content: Today I found out, SHIFT + TRANSIENT + 882323 + Hz, does indeed Trigger a hidden menu.Its the Maintenance mode of the DSP-Card. You can acces under CONFIG - Comm Sys. - Maintenance.Smacks on forehead...So we finally got that sorted out...and we know definately, the Debug Menu gets triggered somewhere else...

author: chick0n
author_rank: Regular Contributor
timestamp: November 01, 2022, 06:37:19 pm
content: I think the culprit is in the 2nd Mixer Stage.When I Power the whole RF-Block with the Voltage Filter (11.5Volt), EXCEPT for the Blue Cable over the 91Ohm Resistor (Where I inject 12.5V). The Analyzer shows me the -10dBm Cal Signal as -21dBm (Uncalibrated).This is the same, as if I Power the whole block with 12.5V. With this, I can get the Analyzer to Self Calibrate...This is the BIAS voltage for the "E5" IC (I think this is a Minicircuits ERA-5 MMIC. Is it?)The Problem is, the ERA-5 Datasheet says, it needs about 5V BIAS Voltage. So with 11 to 12V over the 91Ohm Resistor, it should be about 5V at Pin3 of ERA-5.BUT I measure between 9.7 to 10.4 Volts at Pin3. So ERA-5 is toast?The resistor measures OK.

author: Gyorgy Albert
author_rank: Contributor
timestamp: November 03, 2022, 08:49:48 am
content: @jjoonathanI am not mastering python, but what I understand that you have identified the eeprom structure, which holds the frequency calibration data. Can you detail a bit, how did you find that?And what I concluded: you removed the eeprom from the RF deck, and read out the content. After your RF path (attenuator) measurements, you wrote the corrected coefficients to the eeprom. I am right in this matter?I am very interested in this topic, since I would like to calibrate mine too, but I am looking to find an easyer way, to read it out through GPIB (no good results yet, but I am still working on it), and avoid the disassembly of the RF deck, and unsolder the eeprom. Probably the $R and $W GPIB commands, as I figured out, will help doing thisI would really appreciate your help.Thanks,Gyorgy

author: jjoonathan
author_rank: Frequent Contributor
timestamp: November 03, 2022, 11:39:48 pm
content: I disconnected the digitizer IF input coming from the frequency converters and instead applied a constant tone from a signal generator. Then I used GPIB to read the measured amplitude at 10,000 points or something -- effectively this gave me the calibration trace. It used linear interpolation, so the high resolution trace clearly indicated both the frequencies and amplitudes of the correction table (inflection points). Now that I had the correction table, I created a script to try all "origin/offset/encoding" triples and look for strong correlation. I didn't find anything on the CF card, so I looked harder for EEPROMs and eventually found the EEPROM on the RF deck. The search script found (IIRC) 8 hits corresponding to 8 settings of the input attenuator.With luck, you might be able to use the EEPROM dumps in my dropbox to locate EEPROM in the memory map with $R and then use $W to update the calibration values. Please let us know how it goes!

author: chick0n
author_rank: Regular Contributor
timestamp: November 16, 2022, 08:22:08 am
content: Quote from: chick0n on November 01, 2022, 06:37:19 pmI replaced the ERA-5. (BIAS Voltage of 4.8V seems perfect) And its working now. Frequency Response from 10MHz to 3.5GHz is very good now. Over 3.5GHz its a bit over the place, maybe because the YTF Calibration is wrong, but seems solvable with a little tweaking. Also the the Step Attenuator was replaced, so the Frequency Correction is wrong.But for the Price I got the analyzer for, im pretty pleased.Another little problem is the BIAS Voltage for the first mixer Diode (See Picture). When I connect it, the input Signal degrades. Disconnected everything seems fine.I have 2 RF-Decks with this same problem here, and I heard from others who have this problem.The Diode marked "D2V", seems to be a HSMP-3802 double PIN Diode, where just one Diode is used. It measures OK in the component tester.Mixer Diode seems OK too.

author: chick0n
author_rank: Regular Contributor
timestamp: November 18, 2022, 11:15:01 am
content: I made Firmware with all software options, for R3267/73. You need hardware option 01, to use the software options.Just delete the old files from your cf card, and copy the new ones.Dont format your CF-Card with Windows!!Should work for R3273, R3267 with CF-Card and maybe R3264.Im still looking for Firmwares higher than I08. Im especially looking for firmware from analyzer with "OPT.05 Audio Demodulation Output Option", to check if this is hardware or software option.Maybe some Options are useful for Hobby use.. Especially with the AMPS Option, you can measure FM-Deviation and SINAD.Options:Code:OPT61: IS-95  Aug 08 2001OPT62: 3GPP  Nov 08 2004OPT63: GSM/DECT  Jul 08 2003OPT64: PDC/PHS/IS-136  Jul 25 2000OPT65: cdma2000  Jan 24 2003OPT66: Bluetooth  Jul 08 2003OPT67: HDR  Jun 28 2004OPT69: HDR(MS) Jun 28 2004OPT73: AMPS/JTACS/NTACS  Aug 08 2001

author: serg-el
author_rank: Regular Contributor
timestamp: November 19, 2022, 08:43:49 pm
content: It seems to me, or is there a crack from the fastening of the plate, and down to the right diagonally?

author: chick0n
author_rank: Regular Contributor
timestamp: November 23, 2022, 08:33:06 am
content: Quote from: serg-el on November 19, 2022, 08:43:49 pmThanks..I checked it...and this picture is not from my analyzer. I borrowed it from "3g57", on the forum.I found another picture, from a R3267. There the BIAS Circuit was never connected... Weird...As I understand, the RF deck of the R3267 is the same as the R3273. Especially the first mixer for the low band. Only the High Band mixer goes up to to 8GHz, instead of 26GHz.I have 2 assumptions about this circuit:1. BIAS Voltage for the mixer diode, to compensate for the LO output power fluctuations.2. In the R3271 Service Manual, a similar circuit is described. There a BIAS TEE is used to prevent the IF from the High Band mixer (421MHz) leaking to the low band. How this works I dont know...

author: chick0n
author_rank: Regular Contributor
timestamp: November 25, 2022, 06:17:34 pm
content: Im trying to tune the YTF / High Band Mixer in the cal menu, with my Marconi 6203 Microwave Source. Looks promising.This is YTF Band 1 from 3.7 to 7.4 GHz, sweeped at -10dBm. Before and after coarse tuning attempts.The traces are looking crappy, because the Marconi isnt synched to the R3273.

author: ginji
author_rank: Contributor
timestamp: January 26, 2023, 10:10:45 am
content: Dear chic0nThanks to this blog, I was able to repair my R3267, thank you very much.After investigating the cause, it turned out that there was a problem with the 1st IF or the 2nd IF. When the SSG signal was applied to the 2nd IFin of 421.4MHz, the level was normal.After looking at this blog, I measured the voltage at pin 3 of the ERA-5 and it was 11.2V, so I knew the ERA-5 was dead.I ordered ERA-5SM, and I got it cheaply at ¥210/piece.I installed the ERA-5SM and it was a perfect repair.The voltage after installation is 4.7V.Thank you very much.ginji

author: ginji
author_rank: Contributor
timestamp: January 26, 2023, 10:14:43 am
content: Added, low level problem of R3267.

author: chick0n
author_rank: Regular Contributor
timestamp: May 08, 2023, 09:38:22 pm
content: In search for the DEBUG MENU Access, I extracted some undocumented GPIB Commands from the DFM file.No Luck so far.Maybe someone else wants to try.Especially interesting ones:$AR$AW$DDS$EPR$EPW$FBFIX$FCRD$FR10$FR5$FSK$FW10$FW5$R$RAMP$RF$SR$SW$W$WF$YSWPI think RAM / ROM Read and Write is possible. So be careful...

author: newtech95
author_rank: Newbie
timestamp: June 02, 2023, 10:48:59 am
content: Have you checked the module in the red frame?

author: 3g57
author_rank: Regular Contributor
timestamp: January 10, 2024, 10:02:22 am
content: Look here.Advantest R3273 and R3267 blocks are different.##10 its from Advantest R32733g57

author: 3g57
author_rank: Regular Contributor
timestamp: February 08, 2024, 02:45:04 pm
content: Quote from: ginji on January 26, 2023, 10:14:43 amHello Ginji!Question: did you solve the problem with the signal level?

author: chick0n
author_rank: Regular Contributor
timestamp: April 03, 2024, 09:44:15 am
content: jjoonathan Uploaded a Calibration tool to Github. Maybe its helpful to someone:"Hi! I went and uploaded my R3273 code here:https://github.com/jjoonathan/R3273-calibration. This should help with level correction, but I'm afraid I never figured out YIG correction due to the existing YIG calibration being quite satisfactory in contrast to the HP8565E in the video. I pointed out my best lead, though: there is a suspicious unknown "field5" in the cal data that might just hold the yig cal. Good luck!"His youtube channel:

author: chick0n
author_rank: Regular Contributor
timestamp: June 24, 2024, 08:12:47 am
content: I repaired a R3273 Tracking-Generator module. The MC12093 Prescaler Chip on underside of PLL Board was broken.Maybe its helpful to someone.

author: Davide_M
author_rank: Newbie
timestamp: January 05, 2025, 05:28:10 pm
content: Hello!I have an Advantest R3267 with options 01, 01, 08, 62 and in 3GPP mode fails the “DC CAL” and “Gain Cal” tests.In both tests the message appears “Error 703 - Modulation DC CAL error” (see attached image).Unfortunately I searched in the service manual and in the various forums but but I haven't found any indications that can help me understand the cause (I assume it's the Synthesizer block is fault).All other tests and calibration it passes successfully.Could you help me? Any ideas?Thanks!

author: Gyorgy Albert
author_rank: Contributor
timestamp: January 05, 2025, 06:35:25 pm
content: Hi Davide, and Happy New Year!All the 6x (61, 62, and so an) options needs the DSP module, which is option 01. The error 703 which appears on your R3273 is related to the calibration routines of the DSP module. To proceed with this calibration, the CAL signal must be disconnected from the RF input, as the message indicates “Remove input signals and try again”. Hopefully this time the calibration routines will pass.Best regards,Gyorgy

author: 3g57
author_rank: Regular Contributor
timestamp: January 06, 2025, 05:09:18 pm
content: Quote from: chick0n on June 24, 2024, 08:12:47 amchick0n!Good day!Happy New Year!This winter, closer to spring, we will do preventive maintenance ADVANTEST R3273.I think there will be an opportunity to look at the Tracking-Generator module.What questions did you have about it?Write.With respect 3G57.R32,R40?

author: chick0n
author_rank: Regular Contributor
timestamp: January 07, 2025, 02:58:03 pm
content: yes..position of R32,R40A Picture of the Underside of your Tracking Module, would be nice.

author: Gyorgy Albert
author_rank: Contributor
timestamp: January 07, 2025, 04:04:44 pm
content: 3g57, chick0n,Could you take as much possibe high resolution pictures of the TG module pcb-s while you are working on it? I have multiple R3267 and R3273 units (it is one of my obsessions), but none of them has the tracking generator. I am thinking about making one myself (it is not something impossible at all). The key is, if I/we can decipher the paralel bus connection and communication to the main circuit board. Since I do not have one unit with TG, I cannot do this, but maybe if you will help (and maybe other forum members too), it can be done.What I conclued from your pictures: On the control board the U20, is probably a Lattice CPLD used for paralel BUS to serial conversion. The U4, U6, U21, U22 are the bus transceivers and glue logic between the bus and the Lattice chip. The U7 (25C16) should be the EEPROM for the calibration coefficients. To get its exact content will be very important. It is an SPI EEPROM, the interface (the Lattice CPLD) between the SPI and paralel BUS of the M68K system is made similarly as in the case of the RF module.In one of my units, which has option 21, I noticed that the preicsion OCXO is installed in a similar enclosure as the TG module (obviously, it is missing the upper RF part). But it seems, that the bottom control board should be similarly. The programming of the AD9850 can be made probably using the same SPI serial interface. I will disassembly the option 21 module, maybe I will be lucky, and it has a complete control board (maybe almost identical with the TG control board). This also means, that the TG and the option 21 cannot be used in the same time.BR, Gyorgy

author: chick0n
author_rank: Regular Contributor
timestamp: January 07, 2025, 04:18:34 pm
content: I made a copy of the TG Module EEPROM.Yes...every Module in the R3273 has the Lattice Chip, and a CAL EEPROM.

author: 3g57
author_rank: Regular Contributor
timestamp: January 07, 2025, 07:48:55 pm
content: Albert!I'll try to do this during his preventive maintenance.

author: 3g57
author_rank: Regular Contributor
timestamp: January 07, 2025, 08:03:37 pm
content: Quote from: chick0n on January 07, 2025, 02:58:03 pmR32,R40 I will take measurements without dismantling from the middle terminal to the left and right without changing the polarity of the probe.

author: chick0n
author_rank: Regular Contributor
timestamp: January 08, 2025, 10:21:01 am
content: Quote from: Gyorgy Albert on January 07, 2025, 04:04:44 pmYour Option 21 looks strange. Looks Interesting.I think your Picture shows Option 25 "Reference Converter". With this, you can have 3 different Reference Input Frequencies (10 MHz, 15 MHz, 19.6608 MHz) As the Datasheet mentions you cant have OPT74 TG and OPT25 at the same time, this would make sense. I have a OPT21 OCXO, but its bolted on the underside of the RF Deck.About TG Module. PLL Board.it contains a VARIL "VCO690-4300T" VCO (4.2GHz - 4.4GHz). A LMX2306 PLL. A AD9850 DDS Synthesizer. And a MC12093 Prescaler.If I remember correctly, the 4GHz from the VCO gets prescaled by "Voodoo Magic" to 550MHz range for the PLL IC (I think, the white 5 Pin component with the Red dot, close to R218 does this).The 200MHz Reference Frequency, gets prescaled by 4, wents into the DDS IC and the Output of the DDS wents into the LMX2306 OSC Input.The TG Module contains 3 PCBs. I call them"Adapter Board": Contains the Lattice Chip and CAL EEPROM."PLL Board" Contains VCO, PLL,DDS."Mixer Board": Contains Mixer, Input / Output MMICs, Filters, RF Diodes.

author: 3g57
author_rank: Regular Contributor
timestamp: January 25, 2025, 12:03:33 pm
content: Hello! chick0nLook. Your request!

author: Davide_M
author_rank: Newbie
timestamp: January 25, 2025, 03:15:15 pm
content: Hi Gyorgy,thanks for the reply.I had already tried removing the input signal and repeating the calibration and unfortunately the message “Error 703 - Modulation DC CAL error” continues to displayed.When I press "DC CAL" and "GAIN CAL" I hear switches a relay but I didn't understand if it is inside the DSP board (module 01) or another board (I opened all the moduls but I didn't find it)Do you have any ideas to help me?Thanks anywayDavide

author: chick0n
author_rank: Regular Contributor
timestamp: January 25, 2025, 04:35:41 pm
content: Thank you 3g57!

author: 3g57
author_rank: Regular Contributor
timestamp: January 26, 2025, 01:35:41 pm
content: Hello forum members!I will add a few screenshots on adjusting the power supply.In the photo, all the load resistors are designed for a load current of 0.5A!Below is a photo of a classic of the genre!

author: 3g57
author_rank: Regular Contributor
timestamp: January 27, 2025, 09:48:30 am
content: Hello!I'll post some photos for a substantive discussion.This is RF ADVANTEST R3267The photos are taken in high resolution.Good luck!3g57122a3455a67891010a1111a12131415ATT R3267Basic ATT R3273Check after maintenance!Four states of attenuation level:0dB, -10dB, -20dB, -40dB.

author: chick0n
author_rank: Regular Contributor
timestamp: January 27, 2025, 03:55:32 pm
content: @3g57Do you know the Firmware Versions of your machines? Im interested in FW higher than Version I08.

author: 3g57
author_rank: Regular Contributor
timestamp: January 27, 2025, 04:19:58 pm
content: Quote from: chick0n on January 27, 2025, 03:55:32 pmMoved to archive.

author: chick0n
author_rank: Regular Contributor
timestamp: January 27, 2025, 04:55:15 pm
content: Yes...I08 seems to be the most recent...

author: 3g57
author_rank: Regular Contributor
timestamp: January 28, 2025, 12:27:54 pm
content: Hello. chick0nLook at the photo below.How similar the OS shell is.This is QNX!Question: how to enter the DSP debug menu?R3267 which is on top in the photo does not pass calibration due to the signal level. I want to look in the settings.

author: chick0n
author_rank: Regular Contributor
timestamp: January 28, 2025, 12:37:48 pm
content: Pressing SHIFT + TRANSIENT + 882323 + Hzthen pressing TRANSIENT again, opens Maintenance menu for DSP Card.

author: 3g57
author_rank: Regular Contributor
timestamp: January 28, 2025, 12:49:05 pm
content: Quote from: chick0n on January 28, 2025, 12:37:48 pmThank you.Opened.

author: 3g57
author_rank: Regular Contributor
timestamp: January 29, 2025, 01:25:11 pm
content: Hello everyone.A little help.To check the output voltages from the BLC-024864 filter board.I indicated on the screen what voltage I have at the filter input and filter output.Ideally, there should be 12.6 V at the input and approximately 11.6 V at the output.You do not need to remove the board, but just run the probe along the contactsin the connectors J714, J715 on the chassis without disconnecting them.The voltage from the power supply comes to the J714 connector, which is on thechassis board.The power from the BLC-024864 filter comes to the J715 connector, which is onthe chassis board.Best Regards 3g57

author: 3g57
author_rank: Regular Contributor
timestamp: January 31, 2025, 07:06:10 pm
content: Hello forum members!Today I disassembled the attenuator for maintenance.I am sharing photos. I made a sketch of the circuit.I could not determine the type of the slot optocoupler.What are your opinions on the type of optocoupler?I think this isSlotted Optical Switch.If anyone knows, please write.p.s The inclusion in the circuit U3, U4 suggests that the Slotted Optical Switch has an internal circuit shown below.What are your opinions?

author: 3g57
author_rank: Regular Contributor
timestamp: February 02, 2025, 11:47:44 am
content: Hello!A burnt section pin5-pin14 was found in the U11 driver.I solved the problem by transferring it to the backup section pin4-pin15.Then I need to check it in operation. This will happen later.

author: 3g57
author_rank: Regular Contributor
timestamp: February 04, 2025, 04:24:53 pm
content: Hello!I have repaired the non-working section of the attenuator.To check it and the algorithm of its operation, I have created a tableof its true operation.What is the point?Since the attenuator is in the open state,then the solenoids are visible. It is easier for me to observe its operationand measure the voltages on the signal input connector J1. Then I write this down in the created table.In the resting state, the solenoid anchors are pulled into the winding.In this case, the gates close the upper optical sensors U3, U8, U5, U11 on the board (see the previous figure).When voltage is applied to the corresponding pin from 1 to 8,the solenoids begin to execute commands.It was noticed that when a voltage of 16 VDC is applied to the oddpin 1,3,5,7 J1, the solenoid pushes out its anchor, which in turn turns on the corresponding section of the attenuator!When applying a voltage of 16 VDC J1 to even pin 2, 4, 6,8,the solenoid switches off the corresponding section of the attenuator!Why did I need this?Having an understanding of the process, you can, without disassembling the attenuator,check each of its sections for operability.Also, by applying the appropriate pass-through on the bus to the attenuator, you can check the operation of the driver on the RF board.I will leave a blank table for you.I would like to receive a filled table from you.This will be useful for all of us and we will understand which sections of the attenuator are turned on to attenuate the signal.The table shows which sections of the attenuator are turned on when the signal is suppressed to a certain level.I did this accordingly:-I apply a calibration signal to the input. next- I press the number "5", then I press "+dB"- I write down in the table on which terminals of J1 there is a voltage of 16 VDC.next- I press the number "10", then I press "+dB"and so on up to +60 dB.p.s. I would like to draw your attention to the following:When testing the attenuator outside the device on the bench, it is necessary to limit the input current at the inputs of the TD62082F driver.

author: 3g57
author_rank: Regular Contributor
timestamp: February 05, 2025, 09:47:38 am
content: Moved to archive.3g57

author: chick0n
author_rank: Regular Contributor
timestamp: February 05, 2025, 11:08:43 am
content: You can stop with the Firmware. Thanks. Looks like I08 is most Recent.I Uploaded Version I08, with all options Enabled somewhere here.

author: 3g57
author_rank: Regular Contributor
timestamp: February 06, 2025, 07:59:46 am
content: Quote from: chick0n on February 05, 2025, 11:08:43 amI'll move it to the archive so as not to spam the forum.

author: 3g57
author_rank: Regular Contributor
timestamp: February 06, 2025, 09:42:44 am
content: Hello!After checking the ATT in its place in the equipment and compiling the corresponding truth table of its operation, I check it autonomously.I apply a 1.0 GHz signal with a signal level of 0 dB to the ATT input.At the output, I measure the signal attenuation level for each section separately. Then several combinations of different sections.For greater confidence, the measurements were made with two different devices.The error after ATT maintenance is within the permissible limits.See the photo.The next stage will be autonomous on the stand.p.s. Sorry for the quality of the photo. Backlight spoils it.3g57

author: 3g57
author_rank: Regular Contributor
timestamp: February 06, 2025, 09:52:09 am
content: I'll continue!The readings on the power meter instead of 0 dB are -0.33dB (-0.38dB)this is a drop on the adapters.It was taken into account in further measurements as an error in the connection on the adapters.3g57Question: who can fill out another table on R3267?

author: chick0n
author_rank: Regular Contributor
timestamp: February 27, 2025, 06:30:14 pm
content: So...Im trying to Repair a broken R3273 LOG/AD Board. I think a Lattice 1032E CPLD is Broken. I also have a working LOG Board.Every module in the R3273 has a JTAG header. So I tought, I maybe can copy the 1032E. I know these CPLDs have security bits. And when this is set, you cant read back the content.But I gave it a try. I bought a HW-USBN-2A Lattice JTAG Adapter.I was able to detect the CPLDs with USBLEVER Software. I was also able, to Read back some content from the 2 CPLDs on the LOG Board and CPU Board.Now I need to know. Are these valid jedec files? Or did I read back crap, because of security bit?Can anyone have a look at this? I know nothing about PLD programming....

author: chick0n
author_rank: Regular Contributor
timestamp: March 10, 2025, 09:23:34 am
content: The CPLDs are definitely readable. And the content is copyable to new CPLDs.Thanks you Advantest, for not setting the Security Bit.But my LOG Board is still Broken, it was not the CPLDs.I Repaired the LOG Board. 5 Resistors in the preamplifier stages and power regulator where open circuit.

author: chick0n
author_rank: Regular Contributor
timestamp: March 17, 2025, 08:32:25 am
content: This drawing from jjoonathan helped me, to get a clue how the board works. The 3 cans on the right, I called "preamplifier". Header "J703", on Top, is standart JTAG Connector.J703 Pins:1 +5V Output2 TDO/SDO3 TDI/SDI4 ispEN5 Cut6 TMS/MODE7 GND8 TCK/SCLK

author: 3g57
author_rank: Regular Contributor
timestamp: April 13, 2025, 01:55:43 pm
content: Hello to the forum!I would like to help you a little by posting photos in good resolution of the RF Advantest R3267 block.Don't scold me if it takes up a lot of space!Otherwise it won't work in good resolution!I tried to maintain the sequence of screenshots when posting them.______________-------------------------------------------------------------------------------LCDThat's all for now.Question: Do the files open?Are the component values ​​readable?Good luck!

author: 3g57
author_rank: Regular Contributor
timestamp: April 13, 2025, 07:57:56 pm
content: In the photo of the BLM-024320/02 module from ADVANTEST R3267, you can see the differences from the ADVANTEST R3273 module.In particular, the R3273 module has a U35 with strapping elements. A different connector J711 is installed for the attenuator.I assume it has a different EEPROM. Otherwise, I did not notice any differences. Maybe someone will.I do not have a removed board in front of me. Perhaps someone has one and can write down the ratings of the elements that are not installed. This may help someone in the future with repairs or replacements.U35-R40-R470-R473-R471-R474-R472-R212-R4-C550-C500-C501-D49-D50-D2-L61- (YIG)Possibly on the back sideR42-R705-R706-R467-R468-R469-R503-R610C551-C504-I'll add some nice photos of the back later.Added. See above.I don't have a need, but maybe I will openAdvantest Sinthe Block BLM-023098 board. For pictures in the archive.It was under repair R3273These capacitors were removed from the filter board and the RF module board for a control check.What is characteristic is that after a long period of operation of the device, their capacity is preserved!

author: 3g57
author_rank: Regular Contributor
timestamp: April 14, 2025, 12:08:54 pm
content: Now I will briefly describe the option of dismantling the RF unit.There is nothing complicated about this. You will need a minimum of tools for this.Photo:5.5mm socket wrench for unscrewing LCD posts and quartz oscillator posts.1. It is necessary to remove the casing of the device. At the same time, unscrew 6 screws on the back of the device and 4 screwssecuring the bottom leg (support) brackets.Actions:Place the device with the front panel on the table plane.Unscrew six screws with a PH2 screwdriver bit.Unscrew 4 screws with a PH2 screwdriver bit on the bottom surface that hold the leg (support) bracket brackets. Pull the casing off bypulling it up towards you.Photo:2. Set the device to its normal horizontal working position.Remove the plastic frame covering the front false panel along the perimeter. The frame is pulled away from the device towards you.The frame is not secured by screws! It goes in along four guide screws (photo) until it is fixed in place.Photo;3. Unscrew 13 fastening screws along the perimeter of the false panel. Carefully pull the false panel off the device. Keep in mind that acable is connected to it! Do not tear it off!After removing the false panel, disconnect the cable connector from the keyboard board.Photo:4. Remove the jumper by unscrewing 4 screws with a PH2 screwdriver bit. Two screws on top and two screws on the side of the device.Photo:5. Unscrew 4 screws securing the RF unit tray to the chassis.Photo:6. Disconnect the two cables coming from the RF unit to the BNC connectors on the rear panel.They are indicated by an arrow in the photo.Pull the disconnected cables through the holes into the RF unit tray.Wind them into a ring and put a plastic bag with a ziplock on them.This must be done with all the cables pulled out into the RF unit tray, placing them in the tray!Otherwise, it will be difficult to remove the RF unit!Photo:7. Place the device on its side to disconnect the RF signal cables.Disconnect the RF cables indicated by the red circle from the two modules.Note that there will be two connectors with clip number №5!One of them with a green clip, the other with a yellow clip.Keep this in mind when assembling. DO NOT mix them up!Remember that you do all the described procedures at your own risk!Disconnected cables MUST be pulled completely through their holes into the RF unit tray.Roll them into rings and put on polyethylene covers with a ziplock!Photo:8. Pull the remaining wires indicated by the arrow into the RF tray.Photo:9. Unscrew 8 (seven) nuts around the perimeter of the tray with a 7 mm socket wrench.Be careful, this is not a very convenient area. Do not drop the nut inside the device!Photo:10. Now you have done everything to extract the RF unit.Last step: It is necessary to disconnect the RF unit at the connector from the cross board on the starboard side.Feed (pull) it to the left side of the device. If you have removed all the RF cables into the tray and the jumper was removed earlier, then the technological gap between the unit and the left side will be free and the RF unit will easily be disconnected at the connector.Photo:Good luck!3g57

author: 3g57
author_rank: Regular Contributor
timestamp: April 16, 2025, 12:21:10 pm
content: Hello forum members!I will post the topology (color scheme) of the BLK-023336 board for us on the forum. All voltages supplying the device are supplied to this board. I have already described on the forum what voltage the power supply produces. There are several common buses in the power supply. Having such a design from two boards on hand, you can easily figure out the wiring on the board. When you connect them together, there are no problems with extraneous cables from other boards. Common buses are very clearly visible. In general, all buses are well-dialed! In such a pair, the purpose of the filtering electrolytic capacitors is very well traced. In one of the photos, I described their purpose. Many of them filter the power to the J715 connector. And then the voltage from them goes to the BLC-024846 filter. There are three electrolytic capacitors on the board in the center from the edge. It is desirable to install new ones. Two of them are on the +24 volt bus and one C653 works with YIG. Its rating cannot be changed. Instead of the other two, you can install tantalum 100 μF. 35 volts. Two pieces in a stack. I tracked what voltage comes in transit through the buses to the lower board of the RF unit. You can see it in one of the photos. I assume that these are not all the voltages. When all the boards are installed in their places, then perhaps additional voltage crossing occurs through them.That's all for now.The electrolytic capacitors marked with a yellow marker filter the power coming from the BLC-024864 board.

author: 3g57
author_rank: Regular Contributor
timestamp: April 17, 2025, 10:07:37 am
content: Good day!The photo shows a variant of installing a new JTAG connectorfor programming EEPROM without removing the RF unit.Access appears from the outside after removing the case!p.s. dismantling and installation of the connector should be done with an antistatic bracelet!

author: chick0n
author_rank: Regular Contributor
timestamp: April 17, 2025, 10:29:55 am
content: So its possible to Read Write EEPROM over JTAG too? Can you describe how to do it?

author: 3g57
author_rank: Regular Contributor
timestamp: April 17, 2025, 10:40:47 am
content: Hi chick0n!I'm not very good at programming. Our programmers have already done this. But I haven't connected them to this issue yet. As soon as this is done, I'll write.

author: 3g57
author_rank: Regular Contributor
timestamp: April 20, 2025, 08:26:08 am
content: Hello forum members!I will add a little to the topology of the BLK-023336 board. Here I showed howthe connections of the signal conductors are located. I want to note that from theconnector J14 there is a cable to the tracking generator.The screenshot may still be improved.That's all for now.Have a nice weekend!3g57.

author: 3g57
author_rank: Regular Contributor
timestamp: April 22, 2025, 09:47:33 am
content: Hello forum members!I will briefly describe the connections of the J700 BLM -024320/2 connectors to J13 BLK-023336. If these two boards are not connected, then on the J714 connector going to the filter, pin #5 and pin#6 are shown as connected together. Pin#4 is not connected to them. At the same time, pin#1, pin#2, pin#3 are not connected together and are connected by wires to J700 separately! Then, from J714, the voltage is supplied by a cable to the filter input to the J1 connector of the BLC-024864 board.From the J2 connector, the filter board, the filtered voltage for powering the radio channel cells goes to the J715 connectorof the BLM-024320/02 board. The voltage +12.6V and -12.6V coming to the filter board on the J1 connector, when two boards BLM-024320/02 + BLK-023336 are connected, goes in one group! Then it is filtered, divided into three channels and comes out of the filter from the J2 connector in three groups with levels +11.7V and -11.7V.Why am I describing this?When you measure the voltage on the J714 connectors, keep in mind that when two boards are connected to each other, pin#4,5,6 will be connected to each other on this connector.Pin#1,2,3 will also be connected to each other. See the photo.But three groups of voltages will come from the filter board to the J715 connector:group A:pin#1- +11.7Vpin#4- -11.7vgroup B:pin#2- +11.7Vpin#5- -11.7Vgroup C:pin#3- +11.7Vpin#6- -11.7VGood luck!3g57

author: 3g57
author_rank: Regular Contributor
timestamp: April 26, 2025, 09:31:38 am
content: Good day, forum members!I will post a few photos of the filter board and later describea possible reason for the overheating of the operational amplifier U202.Not saying goodbye!I'm back.If you analyze the operation of the filter board, it only partially fulfills its function. It was decided to modify it. This board makes a rather significant contribution to the operation of the device's radio channel.What was done:- heat sinks were installed to facilitate the thermal regime.- more reliable tantalum capacitors were installed to improve voltage filtering.Then, measurements of the qualityand stability of the filter board were taken independently from the device. The readings were recorded and analyzed. In general, after modification, all parameters except one were normal. I will describe this one parameter below.The board acts as an additional voltage stabilizer and provides current protection in the six output channels. I wrote about them. Due to the voltage drop at the transistor junctions, the voltage decreases from 12.6 V to 11.7 V. These 11.7v with plus or minus signs are the normal voltage at the filter output! The voltage drop is approximately 0.9v. When any of the channels is loaded over 950mA, the output voltage is cut off. That is, the current protection is triggered. I will not describe the circuitry here.Now about this one parameter!This will concern the transistor Q31. Analyzing its inclusion in the circuit at the output of the operational amplifier U202, the thought comes that its conductivity should have been used not PNP but NPN!!!When a transistor with a PNP junction is installed, the operational amplifier stops working in normal mode. It overheats and the voltage parameters at the transistor output (transistor emitter) are not logical.In the photo, you can see the overheating of U202. This rises to 70 degrees Celsius without loads at idle. Then, as I understand it, I temporarily replace Q31 with a transistor with an NPN channel.As a result, in this version, the voltage at the U202 inputs returns to normal and a stable voltage of +5.0V appears at the transistor output. This voltage goes to J2 pin#7.A question for the forum: what brand of transistor U31 do you have installed?In this example, I have the R Y marking on the transistor.p.s In one of the photos, for the sake of experiment, I replaced the original transistor in the SOT-89 case with a similar PNP in a different case. I did this so as not to damage the original one.I'll add a little to the post.When repairing, you should keep in mind that the voltage coming out of the filterof group *A* supplies twelve volts to the entire BLM-02320/02 radio channel control board. I haven't yet examined the other groups *B* and *C, but I didn't find them on this board.Most likely, they supply everything that's under the RF block covers,since they pass through the BLM-02320/02 board to the J703 connector and then go to the lower BLM-024321 board.The reference voltage +10.000V is also formed by this group. And this is already important!

author: chick0n
author_rank: Regular Contributor
timestamp: April 29, 2025, 11:30:45 am
content: My Filterboards have Q31 "RY" too. I think this is a 2SA1024.I too have problem with an Opamp getting hot. And I always had a strange feeling about that filterboard.With what NPN did you replace it?The LogAD Board has a similar filter. But there the 2SA1024 produces exactly 6.00 Volts.Also someone made a schematic of the Filterboard. I think Gyorgy did it:

author: 3g57
author_rank: Regular Contributor
timestamp: April 29, 2025, 08:20:03 pm
content: Quote from: chick0n on April 29, 2025, 11:30:45 amGood evening!chick0n thanks for your response!I'll try to answer your question a little later.I need to mock up this situation again and give you the calculations.But it seems to me that there is a mistake here by many percent!

author: 3g57
author_rank: Regular Contributor
timestamp: April 30, 2025, 10:19:37 am
content: Hello to the forum!I made an answer to the question for us. It is in pictures for a clear understanding of the situation.I am not leaving for long. I will make a layout of the situation with Q31 on a transistor with an NPN junction.I will also make it in pictures.If you do not mind.Photo #6 was a correction!J1! no J2.

author: 3g57
author_rank: Regular Contributor
timestamp: April 30, 2025, 11:26:10 am
content: Continuation of the post.Now the NPN transistor BCX56-16 is installed.The photos show its operation.Everything is synchronous in actions with the upper photos.p.s. Forum members! You've seen it.Give us your opinions.This is necessary to move on.

author: chick0n
author_rank: Regular Contributor
timestamp: April 30, 2025, 11:40:45 am
content: Nice...maybe Advantest made a Mistake there.But is Pin7 5V connected to something on the RF-Block?

author: 3g57
author_rank: Regular Contributor
timestamp: April 30, 2025, 11:51:12 am
content: Quote from: chick0n on April 30, 2025, 11:40:45 amThank you!The best question.As of today, I have not found its further connection on the board, although the conductor on the board is visible under the contact pin #7 when illuminated with coaxial light.It goes into the board and I cannot find it any further!Even if it is not turned on any further, the heating of U202 is harmful to the operation of the operational amplifier and increases the risk of its failure!I took a brush from the silver-plated braid of the cable and searched for pin #7 along the marked squares, running the brush along the element leads. To no avail!

author: 3g57
author_rank: Regular Contributor
timestamp: April 30, 2025, 07:21:15 pm
content: To be more sure, I unsoldered the J715.Showed the board from both sides.Doubts are gone.

author: chick0n
author_rank: Regular Contributor
timestamp: April 30, 2025, 07:43:34 pm
content: Hmm...really looks like not connected.Maybe its possible to remove Q31 completely?

author: 3g57
author_rank: Regular Contributor
timestamp: April 30, 2025, 07:50:00 pm
content: Quote from: chick0n on April 30, 2025, 07:43:34 pmIf Q31 is removed, pins #6 and #7 on cell U202 will need to be connected together!

author: 3g57
author_rank: Regular Contributor
timestamp: May 01, 2025, 08:32:36 am
content: Good day to the Forum!I have slightly marked where the conductors go from the connector J715. They are observed on J703 of this board and then go via a cable to the lower board of the RF unit.The photo shows how the power is distributed. Channel *A* gotthe power of almost all RF cells under the covers.Therefore, the operation of the filter board should be flawless!I am posting a photo of the lower board where the necessary points are marked!The capacitors were replaced on the lower board.Polymer capacitors were made individually!

author: 3g57
author_rank: Regular Contributor
timestamp: May 03, 2025, 06:33:10 pm
content: Hello forum!Now I am sorting out the BLM-024320/02 board.I replaced the electrolytic capacitors on the board. I want to point out that the electrolytic capacitors on the power lines *A* *B* *C* J715 have degraded. I had to replace them. I replaced the capacitors on the 24V line, but they were in good condition. And here at one fine moment a question arises for you.Let's figure it out. Your opinion is important.There are two common buses on this board. On the interface connectorit is signed GND1, GND2!They are included in the components in a peculiar way. While checking these buses, I encountered an unusual situation when I started checking the capacitors tha block parasitic surges.Here is their list.C20, 21,657,204,654,71,123,117,37,140,30.They are installed next to the integrated circuits of the DG441DY switches. There are 12 of them on the board.When checked with a device on the board, all these capacitors showed a minimum resistance of several milliohms.I removed all these capacitors from the board, assuming that one of them was broken. It turned out that all of them were not in very good condition, were very worn out and needed to be replaced.Photo:But the question is different. These capacitors shunted the two above-mentioned common buses between themselves! These buses are connected to each other somewhere. I could not find where! Or is there a breakdown in the microcircuit case between AGND and DGND?I would like to find out with your help.Therefore, I ask you to check the resistance between the contacts of the mentioned capacitors.The photo shows a section of the board with a desoldered capacitor. These contacts need to be checked for resistance.We need to find out and then move on!

author: 3g57
author_rank: Regular Contributor
timestamp: May 07, 2025, 06:11:40 pm
content: Good day to the forum!The radio channel unit is almost ready for assembly.There are two positions left.1- check the quartz generator with a reference frequency of 10 MHz.2- find out the situation with the common buses that are presenton the board.Without the second position, there is no point in assembling for switching on!I will post some photos after replacing the capacitors.Good luck to everyone!I did not solder new capacitors 150nF on the board until I found out the situation.

author: 3g57
author_rank: Regular Contributor
timestamp: May 08, 2025, 02:17:02 pm
content: Good day to the forum!A little information for the piggy bank on the quartz generator.Its frequency has shifted over the years. But it should be taken intoaccount that it is connected without a VCO chain. The analyzer has an option for operationalfrequency correction from the control on the front panel.Of course, it is good to look at the PDF for this model of quartz generator.I have not yet looked at the amplitude and shape of the signal. This will be later.Good luck to everyone!3g57

author: 3g57
author_rank: Regular Contributor
timestamp: May 09, 2025, 08:04:03 am
content: As promised, I will add photos of the output signalof the quartz reference generator.It worked in the device for almost 20 years!Good luck to all!

author: 3g57
author_rank: Regular Contributor
timestamp: May 09, 2025, 12:05:58 pm
content: I will add one point to today's post.This concerns the standard analyzer option.Operation of the reference quartz generator without heating.A good generator. It holds the frequency well for a long time under load.Yes. And it is very smoothly tuned!Starts working from 5 volts!According to the calculated data, 10.83 VDC is supplied to the generator from U1.Brown +VFCRed +10.0 VDCOrange -GNDYellow - N/C

author: chick0n
author_rank: Regular Contributor
timestamp: May 12, 2025, 10:52:53 am
content: Quote from: 3g57 on May 03, 2025, 06:33:10 pm

author: 3g57
author_rank: Regular Contributor
timestamp: May 12, 2025, 03:18:01 pm
content: Hi chick0n!Hello to the forum.Thoughts about capacitors.The electrolytic capacitors that were on the filter boardwere in normal condition. Nevertheless, I decided to replace them with tantalum ones. They are more durable and have a better ESR.I replaced them with a larger capacity. It is necessary to increase their capacity very carefully. Not by much, since the higher current of their charge when turning on the device can exceed the permissible norms and usually in this case the installed fuses are triggered to prevent breakdown of the rectifier diodes.The electrolytic capacitors that were installed forfiltering the power supply on the BLM-024320/02 board did not show normal values ​​when they were tested. I also replaced them with tantalum ones. All of them were installed for filtering the power supply.I replaced the C654 and C655 capacitors with polymer solid-state ones with a larger capacity. They are better in parameters than aluminum acid ones. They are installed to filter the power supply on the +24V bus. But I replaced the electrolytic C653 with a regular aluminum capacitor with low ESR. I liked it better.This capacitor is not installed in the power supply circuit. Therefore, I did not change its nominal capacity and operating voltage.I installed 100 μF 50 volts. I will not change all the small-capacity ceramic capacitors. On the board, they were soldered only in the circuit that concerned checking the two common buses. On all 12 commutator microcircuits, the terminals that touched these two buses were raised.This was done to check for breakdown of the element. When enlarged, you can see that the terminals are raised from the conductor and there is a red dot on the microcircuit body. As of today, this has not yielded results. All tested radio components are without breakdown.Nevertheless, these two buses are in contact with each other. If any of the forum members has the opportunity to check this for themselves, I would be grateful. Otherwise, you need to unsolder several microcircuits.Let's go back to the ceramic capacitors. There is no circuit diagram of the board. I assumed that these capacitors that are unsoldered in the photo in the package had an initial capacity of 220nF. Then they sagged. And if we assume that their initial capacity is 150nF, then they are still in good condition. The second is more likely!Therefore, I do not raise the issue of their complete replacement.That's all for today.Write your opinion. It is important.We will move little by little.Good luck to everyone.3g57