What Is a Test Point

A test point is a designated conductive pad or exposed trace on a device's printed circuit board (PCB) that engineers and technicians use to access low-level hardware functions. On the Huawei Y3 2017 (CRO-U00), test points allow repair professionals to communicate directly with the MediaTek MT6737M chipset, bypassing the normal boot sequence. This is essential when software-level tools cannot reach the device — for example, when the bootloader is locked, the device is stuck in a boot loop, or standard USB detection fails. By bridging specific pads, technicians can force the phone into In-System Programming (ISP) mode or a similar emergency download state, making recovery operations possible.

When Technicians Need This

Test point access on the CRO-U00 is typically required in the following situations:

  • FRP (Factory Reset Protection) bypass: When a device is locked to a Google account after a hard reset and ADB/fastboot methods have failed.
  • Dead boot repair: The phone shows no signs of life — no charging indicator, no vibration, and no display response — after a failed firmware flash or software corruption.
  • eMMC ISP read/write: Direct NAND flash access for firmware backup, IMEI repair, or complete software restoration when the USB interface is non-functional.
  • Bootloader unlock failure recovery: When an incorrect unlock attempt has rendered the device unresponsive to normal flashing tools.

Locating the Test Point

To access the test points on the Huawei Y3 2017 CRO-U00, the rear cover and battery must first be removed, followed by the screws securing the midframe. Once the PCB is exposed, the ISP test pads are located near the eMMC chip on the lower section of the main board. The relevant pads — CLK, CMD, DAT0, VCC, VCCQ, and GND — are small, unlabeled solder points that correspond to the eMMC ISP pinout. A magnifying loupe or digital microscope is strongly recommended to identify these pads correctly. Referencing a verified PCB diagram specific to the CRO-U00 variant is advised before probing any pad.

Step-by-Step Access Procedure

Follow this procedure carefully to enter ISP or emergency download mode:

  • Power off the device completely and disconnect any charging cable.
  • Disassemble the phone and expose the PCB as described above.
  • Using fine-tipped ISP cables or a dedicated ISP clip jig, connect the CLK, CMD, DAT0, VCC (2.9 V), VCCQ (1.8 V), and GND pads to your box or adapter.
  • Open your flashing or repair software (e.g., EasyJTAG Plus or UMT Dongle) and select the MediaTek MT6737M eMMC ISP configuration.
  • Apply power through the tool and allow the software to detect the eMMC chip.
  • Proceed with the desired operation: firmware write, FRP erase, or data backup.

If triggering META or BROM mode via USB instead, short the designated test pad to GND while inserting the USB cable, then release when the software detects the device in download mode.

Safety Tips and Precautions

Before attempting any test point procedure on the CRO-U00, observe the following precautions:

  • Always work on an anti-static mat and wear an ESD wrist strap to prevent electrostatic discharge damage to the chipset or eMMC.
  • Verify your tool's output voltage before connecting — eMMC VCC must be 2.9 V and VCCQ must be 1.8 V. Overvoltage will permanently damage the flash chip.
  • Never apply ISP voltage while the battery is still connected unless your tool explicitly supports live-board ISP.
  • Use fine, insulated probes to avoid accidental shorts between adjacent pads.
  • Double-check your PCB diagram source; using incorrect pin assignments can brick the device beyond recovery.

Pin / Test Point Reference

PinDescription
CLKeMMC clock signal pad for ISP access — Verify pad location with CRO-U00 PCB diagram
CMDeMMC command signal pad for ISP access
DAT0eMMC data line 0, primary data transfer pad for ISP
VCCeMMC core power supply — 2.9 V — Do not exceed 3.0 V
VCCQeMMC I/O power supply — 1.8 V
GNDCommon ground reference pad

Tools required: EasyJTAG Plus, UMT Dongle, Riff Box 2, ISP cable set / clip jig, Digital microscope or loupe, Anti-static mat and ESD wrist strap, Fine-tipped soldering iron (for direct wire method)

Supported operations: FRP Erase, Dead Boot Repair, Read Firmware, Write Firmware, IMEI Repair, eMMC ISP Read/Write, User Data Wipe

⚠ Safety note: Use correct voltages only: VCC = 2.9 V, VCCQ = 1.8 V. Overvoltage will destroy the eMMC. Always use ESD protection. Disconnect the battery before connecting ISP lines unless your tool supports live-board mode.