Problems and Fixes after replacing the iPhone 3GS back housing

[contentblock id=2]

I recently purchased an iPhone 3GS that had a cracked back housing. I found a replacement part on eBay for $18 shipped.  I found a nice 720p youtube video that really helped my confidence before disassembling the iPhone.

Replacing the back is probably the most difficult repair you can make to the iPhone. It requires that you take everything apart except the front assembly (glass/digitizer). The repair took about 2 hours. It will be much quicker next time (yah, I’ll probably help other people fix their phones too) since I know what I’m doing now. After putting everything back together, I ran into a few problems, one of which had me very nervous for a bit.  Here’s how it went down…

I replaced the back and closed up the iPhone.  Then I discovered that my sim card was not getting recognized.  It was as if the iPhone didn’t even know when I ejected and reinserted the card (which turned out to be the case).  Then I did something stupid.  I got distracted.  🙁  I forgot to completely power down the iPhone before I opened it again.  I discovered the sim problem but there wasn’t much I could do about it because upon reconnecting the LCD and front assembly and closing the iPhone I could hit the power or home button which would light up the screen but it would only light up black.  It was like the motherboard was not sending data to the screen.  I will admit that at this point I was a little worried.  I thought I might have damaged the motherboard somehow but I knew that it had been working only moments before and I thought it unlikely that disconnecting the LCD while the iPhone was on would really do any damage.  I started thinking worst case scenario, I have to buy a new motherboard ($100 to $150).  Not the end of the world but certainly one of the most expensive mistakes I’ve ever made with electronics.

So now I had 2 problems to solve and this was supposed to be a 20 minute project!  I had another hunch that shutting down the iPhone and rebooting with everything attached might solve the LCD problem and it did!  The only problem was that I couldn’t figure out a way to shut down the iPhone since the digitizer was unresponsive and I couldn’t see anything on the screen.  I decided to disassemble everything again to disconnect the battery.  Then I reconnected everything and rebooted and the LCD problem went away.  Yay!

There is an easier way to shut off the iPhone without taking everything apart.  The battery connects to the motherboard via 2 contact points on its back side.  When looking at the front of the board they are in the bottom right area just south of the vibrator.  You can unscrew the 3 motherboard screws along the right edge of the board and loosen the ones on the left side.  Then you can gently lift the motherboard on the right side which will disconnect the contact points.  Keep it disconnected for a good 10 seconds to let the motherboard clear out.

Finally I was ready to tackle the sim card problem.  Earlier when I opened the iPhone looking for the problem with the sim card I noticed that the motherboard mounts a hair lower in the new back housing preventing the sim card activation circuit from opening.  This seemed strange to me since I know that this is an OEM part.  How could it be that different?  But take a look at the picture…

With the sim tray fully inserted, it didn’t press the tiny v-shaped wire that opens the circuit. Every time this circuit is opened the iPhone tries to recognize the sim card. After pondering on the problem for a bit, I decided that it would be better to modify the sim tray than the wire on the motherboard. After all, if I messed up, sim trays are cheap. I ended up cutting a tiny sliver off of the end of an old gift card. It was the only thing I could find around the house that was thin enough. I super-glued it to the sim tray which worked out nicely…

Close up with the iPhone 3GS guts! – iPhone Tear Down

[contentblock id=2]

During a recent repair to my iPhone 3GS I decided to take some close up shots…


All the parts broken down.


This is the front glass, digitizer (touch translation), and LCD.


Here’s another view.


The battery.


The motherboard front.


The motherboard back.


Charger port, Speaker (left), Microphone (right) – Front


Charger port, Speaker, Microphone – Back


Sim tray, Wifi antenna, Headphone jack, Power button, Volume buttons


Case trim/Cell antenna

After tearing the whole thing down and putting it back together, I’m really impressed with the hardware design. This is where Apple’s products shine. I did run into a few strange snags while doing the back replacement. See my next post for more info on that.

iPhone 3GS on Consumer Cellular with Edge data working!

[contentblock id=2]

Read this first: This post is somewhat dated so I’ve written a follow-up post that could save you a lot of time if you just want a quick way to set up your iPhone or iPad on Consumer Cellular.

As you read on, you’ll see that this was a discovery process for me. I took several steps that weren’t really necessary. So try this first…

  1. Make sure your iPhone is jailbroken. Read up at the iPhone Dev Team blog for more info on jailbreaking.
  2. Update your AT&T carrier bundle to allow APN editing. You will need an SFTP application such as Cyberduck (mac) or Filezilla (PC) to connect in and see the files on your iPhone. Connect to root@youriPhoneIPaddress using the user name root and the password alpine (unless you’ve already changed the root password – which you should do if you haven’t already). Inside the AT&T carrier bundle, there is a file named carrier.plist. It is located here… /System/Library/Carrier Bundles/ATT_US.bundle/carrier.plist. It contains a property named “AllowEDGEEditing” which is a bool (true/false) property. If that property is not in the file, you can manually add it using the Apple plist editor (part of the Apple developer tools – a free download). I’m sure there are free plist editors for the PC as well. Note that this file must be saved in the same format that you found it (binary). Don’t try to save it as a plain text XML file. It won’t work. If you are using an editor other than the Apple plist editor you’ll need to make sure it supports binary when saving. After editing this file, go to Settings > General > Network > Cellular Data Network and enter the consumer cellular APN, MMSC, MMS Proxy and MMS UA Prof URL.

That’s it. If that doesn’t work for you, read on…

Here is what your carrier.plist might look like…

Discovery Process (don’t do this stuff unless you know what you are doing):
Finally after almost 2 years with an iPhone on Consumer Cellular I figured out how to get their data plan working!  It took a great deal of hacking at carrier bundles.  By default Consumer Cellular uses the AT&T bundle but for some reason it does not use the AT&T carrier name on screen.  I haven’t figured that one out yet.  At any rate, this is pretty kickin’ because Consumer Cellular is cheap and you don’t have to unlock your phone for them to work!  On the flip side you do have to jailbreak to do this hack.

I’m uploading my AT&T bundle so that you don’t have to go through all the work but you might have to anyway since there are signatures in the carrier.plist file.  I’m not sure if those are tied to the phone or not.  Here are the files…

Consumer Cellular Custom .ipcc (I really don’t think you need this)
Consumer Cellular Custom AT&T bundle
ATT_US.bundle (4.3.1)

There’s definitely an easier way but this worked for me…

Custom Consumer Cellular carrier bundle (I don’t think you need to do this part)…

  1. Used the carrier bundle generator website to create a bundle using the listed Consumer Cellular APN and MMS settings**.
  2. Installed carrier bundle via iTunes as recommended by the carrier bundle generator website.
  3. Using SFTP, copied everything in /var/mobile/Library/Carrier Bundles/ (including ConsumerCellular_custom.bundle) to my desktop.  This serves as a backup in case something goes wrong.
  4. Deleted everything in /var/mobile/Library/Carrier Bundles/
  5. Copied ConsumerCellular_custom.bundle to /System/Library/Carrier Bundles/

Custom AT&T carrier bundle…

  1. Using SFTP, copied /System/Library/Carrier Bundles/ATT_US.bundle to my desktop.
  2. Opened carrier.plist from inside the AT&T bundle on my desktop with the Apple plist editor and added settings that were in the Consumer Cellular bundle but not in this one.  I also updated the name of the provider and MMS proxy URL.  Download the custom AT&T bundle and compare it to yours to see what all I changed.
  3. Copied ATT_US.bundle from my desktop back to /System/Library/Carrier Bundles/.
  4. Restarted the phone.

Note that you can use SBSettings to check if you have a “Data IP Address” on the Edge network.  If this is helpful leave me a comment and let me know of your success!

**Consumer Cellular’s listed APN and MMS settings…

Service Name MMS Web
Proxy Address proxy.mvno.ccmobileweb.com <blank>
Proxy Port 80 <blank>
Proxy Push Disabled Enabled
Authentication Type Secure Secure
Username (CSD/GPRS) <blank> <blank>
Password (CSD/GPRS) <blank> <blank>
GPRS access point att.mvno att.mvno
Homepage http://mmsc.cingular.com http://mmsc.cingular.com

UPDATE:

  • It appears that after running this for 2 days, Consumer Cellular is not tracking my data usage.  Perhaps the hacked carrier bundle is causing the iPhone to bypass their servers and go straight to AT&T? Or perhaps they are tracking it but it’s not being reflected on their website since they still think I’m using an old Nokia phone and the data option is grayed out?  It took a while to show up but they are tracking it.
  • I noticed that in order to get data working I must disable WIFI, data and the phone components.  Then enable phone, then edge.  Sometimes it takes a few minutes to turn on.
  • I later enabled this on my old 3G running iOS 3.1.3.  All I had to do was add the “AllowEDGEEditing” bool property to the beginning of the carrier.plist file inside the AT&T bundle.  Then I went to Settings > General > Network > Cellular Data Network and entered the consumer cellular APN, MMSC, MMS Proxy and MMS UA Prof URL.
  • Since I originally updated my carrier bundle, the plain text APN settings that I added have been converted to “data” entries encoded using a signature (most likely specific to my phone). You’ll see this in the plist if you download the second file listed above. I’m not sure how to generate these signatures but I suppose you could just remove them from the file and then manually add the APN settings again. Perhaps new signatures will be generated for your iPhone after doing so?

If this saves you money, please consider donating. This will allow us to continue to provide quality content.