A Coordinated Electric System Interconnection Review—the utility’s deep-dive on technical and cost impacts of your project.

Challenge: Frequent false tripping using conventional electromechanical relays
Solution: SEL-487E integration with multi-terminal differential protection and dynamic inrush restraint
Result: 90% reduction in false trips, saving over $250,000 in downtime

The three operating regions you have to design to

Device	Output vs voltage	Response	Best suited to	Main limitations
Mechanically switched capacitor or reactor	Proportional to voltage squared	Seconds; discrete steps; limited switching operations per day	Steady-state reactive supply, voltage profile, loss reduction	No dynamic capability; step voltage change on switching; capability collapses when most needed
Static var compensator	Capacitive branches proportional to voltage squared	A few cycles; continuously controllable	Continuous control where cost matters and deep voltage support is not the driver	Square-law capability loss; harmonic filters are part of the plant and interact with the network
STATCOM	Approximately proportional to voltage — constant current capability	One to two cycles closed loop; converter response faster still	Voltage stability margin, weak interconnections, fast disturbance recovery, flicker and unbalance compensation	Higher capital cost; converter losses; adds a converter and its control dynamics to the network
Synchronous condenser	Governed by machine capability and excitation	Excitation response in the hundreds of milliseconds; inherent inertial response instantaneous	System strength and inertia, short-circuit contribution, black start support	Rotating plant with maintenance and losses; slower controlled response than a converter
STATCOM with energy storage	Reactive as a STATCOM, plus real power within the storage rating	As STATCOM for reactive; real power limited by storage	Where a real power deficiency is part of the problem	Cost and complexity of the storage; different failure and maintenance profile

Stage	Keentel scope	Outcome
Screening	Series-compensation proximity, radial contingency review, UIF and short-circuit ratio screening, frequency scans	Early identification of which SSO types apply
Detailed studies	PSCAD/EMTDC EMT studies with vendor real-code models, impedance-based and frequency-scan analysis	Clear evidence of stability margins or risk
Model quality	EMT model review, benchmarking against positive-sequence models, model acceptance support	Models that system operators accept
Mitigation	Control retuning recommendations with vendors, SSDC and bypass logic requirements, protection and monitoring specifications	Practical, coordinated solutions
Interconnection support	SSR and SSO study reports for ISO and utility requirements, response to reviewer comments	Fewer delays in the interconnection process

Resilience: designing CDUs to the facility Tier objective

Liquid cooling makes heat removal more critical, not less. Cold plates hold only seconds of thermal buffer. If TCS flow stops, processors throttle or shut down very quickly. Resilience design must therefore cover:

Pump redundancy: N+1 pumps at minimum, with automatic changeover.
CDU redundancy: N+1 CDUs on a common TCS header, or 2N CDUs serving A and B manifolds for fault-tolerant designs.
Power to CDUs: dual-corded CDUs fed from A and B sources, with pumps and controls on UPS power so coolant keeps flowing through a utility failure and generator start. This is the liquid-cooling equivalent of continuous cooling.
Facility water continuity: chilled water or condenser water must also continue, through thermal storage, UPS-backed pumps or a high enough FWS temperature that the TCS can coast on stored thermal mass for the transfer period.
Concurrent maintainability: isolation valves so any CDU, pump, filter or manifold section can be serviced without stopping the others.
Leak management: leak detection, drip trays, automatic isolation valves and procedures for fluid spills.

Electrical engineering considerations

CDUs and liquid-cooling plants are electrical loads with their own design requirements:

Pump motors and VFDs. Large CDUs use variable-frequency drives on their pump motors. These introduce harmonic current that must be included in the facility's harmonic study and IEEE 519 evaluation.
Critical mechanical load on UPS. Putting CDU pumps on UPS increases UPS and battery sizing. The mechanical UPS load must be included in redundancy and ride-through calculations.
Feeder and protection design. Dual feeds, automatic transfer, selective coordination and arc-flash labelling apply to CDU power distribution just as they do to IT power.
Generator transient response. CDU pumps restarting together after a transfer create motor inrush on the generators. Staged restarts and soft acceleration reduce the step load.
Load dynamics. AI training loads can swing rapidly between high and low power. Cooling controls must track those swings without temperature overshoot, and electrical systems must handle both the IT and the cooling load changes.

Commissioning a liquid-cooled data hall

Flush and clean the TCS piping and manifolds to the specified cleanliness, using high-purity flush water.
Fill and vent with the specified coolant, verifying glycol concentration and chemistry.
Pressure test for leaks at design and test pressures, including quick-disconnect fittings.
Verify sensors and controls: flow meters, temperature sensors, pressure transmitters, leak detection and BMS points.
Load test with heat load banks connected through the cold-plate interfaces or rack manifolds, across the operating range.
Prove the heat balance on both loops at several load steps, and the approach temperature against the design.
Test failure scenarios: pump failure, CDU failure, power transfer to generator, valve failure and loss of facility water, confirming temperatures stay within the IT vendor's limits.

How Keentel Engineering helps

Keentel Engineering supports data center owners, developers and EPCs with the electrical engineering that liquid-cooled facilities depend on, and coordinates with the mechanical engineer of record and cooling vendors on the integrated design.

A transformer can be completely healthy and still challenge its own differential protection. During a severe fault just outside the transformer, very high through-fault current flows in one side and out the other. In theory, the currents measured on each side balance after ratio and phase-shift compensation, and the differential relay (device 87T) sees nothing. In practice, the relay does not see primary current. It sees the secondary current reproduced by each current transformer (CT), and CTs do not always reproduce it faithfully.

Why a healthy transformer can produce differential current

Step	What happens	Effect on the 87T relay
1. Severe external fault	High through-fault current, often with a large DC offset, flows through the transformer to a fault outside the zone	Restraint current rises sharply
2. Unequal CT duty	The CTs on each side see different current, X/R ratio, burden and remanent flux	One CT is driven much harder than the other
3. One CT saturates first	The saturated CT's secondary waveform collapses for part of each cycle	Its measured current falls below the true value
4. Secondary currents no longer balance	The compensated currents from each side are unequal	An apparent differential, or spill, current appears
5. Security challenge	If spill current exceeds the relay characteristic	The relay may trip a healthy transformer for an external fault

The key relationships

Operating (differential) current: the phasor sum of the compensated currents from all windings, IOP = |IW1 + IW2|.
Restraint current: a measure of the through current, commonly the average or the maximum of the compensated winding currents.
Trip condition: the operating current exceeds both the minimum pickup and the slope multiplied by the restraint current.
CT saturation screening (IEEE C37.110): saturation is avoided when (1 + X/R) × If × Zb ≤ 20, with If in per unit of CT rated current and Zb in per unit of the CT standard burden.

Why it matters

Security: a false trip of a 230 kV or 345 kV transformer for an external fault removes a major element unnecessarily and can extend an outage across a substation.
Dependability: settings made very insensitive to avoid false trips can delay or prevent tripping for real internal faults.
NERC compliance: an unnecessary 87T operation on a Bulk Electric System transformer is a protection system misoperation under NERC PRC-004 and requires analysis and a corrective action plan.
Asset cost: a large power transformer is a long-lead item; protection must be both secure and dependable.

Transformer differential protection is the primary protection for most US power transformers rated above about 10 MVA, from 69 kV distribution substation transformers to 345 kV and 500 kV autotransformers. It is fast, selective and sensitive. It also has more sources of false differential current than any other differential scheme, because the transformer itself changes current magnitude and phase angle, draws magnetizing current, and may have an on-load tap changer. This guide explains where false differential current comes from during external faults, how CT saturation creates it, and how relay engineers keep 87T protection both secure and dependable, following IEEE C37.91, IEEE C37.110 and IEEE C57.13.

The differential principle

The 87T protection zone is bounded by the CTs on each winding. For any fault outside the zone, current entering the zone must equal current leaving it, after accounting for the transformer turns ratio and vector group. For a fault inside the zone, the currents no longer balance and the difference flows into the fault.

Modern numerical relays compute the operating current from the compensated secondary currents of all windings:

where Sref is the reference MVA, VLL,n is the winding line-to-line voltage and CTRn is the CT ratio. Numerical relays perform ratio, phase-shift and zero-sequence compensation internally, so CTs on all windings can be connected in wye.

Ratio matching: tap values reconcile different winding voltages and CT ratios. Older electromechanical relays used discrete taps, which left a residual mismatch.
Phase shift: US delta-wye transformers shift the phase angle by 30 degrees. By ANSI convention, the high-voltage side leads the low-voltage side by 30 degrees. The relay applies a matching compensation matrix.
Zero-sequence removal: a grounded-wye winding supplies zero-sequence current to external ground faults, while the delta winding on the other side does not carry it out of the zone. Unless zero-sequence current is removed from the grounded-wye side, an external ground fault produces false differential current.

Source	Typical magnitude	How the relay handles it
Magnetizing (excitation) current	Usually below 1 to 2% of rated current	Minimum pickup setting
On-load tap changer position	Up to about ±10% of through current	Slope 1 setting
CT ratio errors within accuracy class	Up to about 10% at high current for C-class CTs within rating	Slope settings
Relay measurement error	A few percent	Slope and pickup margins
Inrush on energization	Many times rated current, rich in second harmonic	Harmonic restraint or blocking
Overexcitation	High fifth-harmonic content	Fifth-harmonic blocking and volts-per-hertz protection
CT saturation during external faults	Can be a large fraction of through-fault current	Dual slope, external fault detection and other security logic

The last row is the subject of this guide. It is different from the others because its magnitude depends on the fault, the system X/R ratio, CT remanence and the CT circuit design, and it can exceed every fixed allowance in the relay characteristic.

How CT saturation creates spill current

A CT produces secondary current by driving magnetic flux in its core. The flux required is proportional to the voltage the CT must develop across its secondary burden: the CT winding resistance, the lead resistance and the relay burden. When the required flux exceeds what the core can carry, the core saturates and the CT stops transforming current for part of the cycle.

Why external faults are the worst case

Highest through current: a fault just outside the zone, such as on the low-voltage bus or a feeder near the substation, drives the largest current through the transformer and both sets of CTs.
DC offset: fault current usually contains a decaying DC component. The DC component drives the CT core flux steadily in one direction, increasing the flux required by up to (1 + X/R) times the AC flux.
High X/R ratios: fault paths through large transformers often have X/R ratios between 20 and 40 or higher, so the DC component decays slowly.
Remanent flux: CT cores can retain significant remanent flux after a previous fault or after DC testing. Remanence in the direction of the new fault flux reduces the margin before saturation.
Unequal CTs: each side of the transformer has a different CT ratio, accuracy class, winding resistance, lead length and remanence. One CT will saturate before the other.

What the relay sees

When one CT saturates, its secondary current collapses during part of each cycle while the other CT continues to reproduce the primary current. The compensated currents no longer cancel. The relay computes an apparent differential current, often called spill current, even though the fault is outside the zone. At the same time, the reduced output of the saturated CT can also reduce the measured restraint current, moving the operating point towards the trip region.

The first few milliseconds after fault inception are usually transformed accurately. Saturation begins after a time that depends on the CT's margin; in severe cases it can occur in less than a quarter cycle. This short window of accurate measurement is what modern external fault detection logic relies on.

The IEEE C37.110 saturation criterion

IEEE C37.110 gives a practical screening criterion for avoiding saturation with a fully offset fault current:

Class	Standard burden	Terminal voltage at 20 × rated current	Typical US application
C100	1.0 Ω	100 V	Low-ratio CTs, limited burden
C200	2.0 Ω	200 V	Medium-voltage switchgear
C400	4.0 Ω	400 V	Switchgear and transformer bushings
C800	8.0 Ω	800 V	Transmission bushings and free-standing CTs, 115 kV to 500 kV

Parameter	Value
Transformer	30/40/50 MVA, 138 kV delta / 13.8 kV grounded wye, Z = 10% on 30 MVA
138 kV source	20 kA three-phase fault level
External fault	Three-phase fault on the 13.8 kV bus, just outside the 87T zone
Through-fault current	9.4 per unit: about 1,180 A at 138 kV and 11,800 A at 13.8 kV
X/R of fault path	25
HV CT	600:5 C800 bushing CT on the 400:5 tap (effective C533)
LV CT	3000:5 C400 switchgear CT, full ratio

HV CT check

Fault current in CT rated units: 1,180 ÷ 400 = 2.95 per unit.
Burden: CT winding 0.2 Ω + leads 1.0 Ω + relay 0.02 Ω = 1.22 Ω, or 1.22 ÷ 5.33 = 0.23 per unit of standard burden.
Criterion: (1 + 25) × 2.95 × 0.23 = 17.6, which is below 20. The HV CT is not expected to saturate.

LV CT check

Fault current in CT rated units: 11,800 ÷ 3,000 = 3.94 per unit.
Burden: CT winding 1.5 Ω + leads 0.6 Ω + relay 0.02 Ω = 2.12 Ω, or 2.12 ÷ 4.0 = 0.53 per unit of standard burden.
Criterion: (1 + 25) × 3.94 × 0.53 = 54, which far exceeds 20. The LV CT is expected to saturate within the first cycle of a fully offset fault.

What this means

The two CTs are both correctly rated for steady-state current, yet only the LV CT saturates. The LV secondary current collapses during part of each cycle while the HV CT continues to reproduce the primary current. The relay sees exactly the situation in this article's title: a healthy transformer, an external fault and an apparent differential current.

Even upgrading the LV CT to C800 gives (1 + 25) × 3.94 × 0.26 = 27, still above 20. For large transformers, eliminating saturation entirely is often impractical, so the design must combine better CTs with secure relay logic.

How modern 87T relays stay secure

Dual-slope percentage restraint

A dual-slope characteristic uses a lower slope at normal through currents, where tap changer and CT errors dominate, and a much higher slope above a breakpoint, where CT saturation becomes likely:

Typical starting values are a minimum pickup of 0.2 to 0.3 per unit of tap, slope 1 of about 25 to 30%, a breakpoint around 2 to 4 per unit and slope 2 of 50 to 80%. Final values depend on the relay's restraint definition, the tap changer range, CT performance and the utility's philosophy.

External fault detection

Many numerical relays detect an external fault during the first few milliseconds, before CTs saturate. A sudden rise in restraint current without a corresponding rise in operating current indicates a through fault. The relay then temporarily increases security, for example by switching to a high slope, requiring additional harmonic or directional confirmation, or adding a short delay, until the fault clears.

Harmonic and waveform-based logic

Second and fourth harmonic restraint or blocking: used for inrush, typically set around 12 to 20% of fundamental. Saturated CT waveforms also contain even harmonics, which can add security during external faults.
DC and waveform-shape detection: some relays detect the flat-topped or gapped waveform of a saturated CT or the DC content of the differential current.
Fifth harmonic: used for overexcitation; not a primary defense against CT saturation.

Directional and phase comparison checks

For an internal fault, currents on each side flow into the transformer; for an external fault, one flows in and one flows out. Comparing current directions, particularly negative-sequence direction, provides a powerful check that remains valid during partial CT saturation.

Unrestrained (high-set) element

The unrestrained differential element (87U) trips without restraint for very severe internal faults. It must be set above the maximum inrush current and above the worst false differential current from CT saturation during external faults, commonly 8 to 12 times tap. This setting must be checked against external fault studies, not set from a typical value alone.

Restricted earth fault protection

Restricted earth fault (87N or REF) protection compares the neutral CT current with the residual current of the phase CTs. It provides sensitive ground-fault coverage near the neutral of grounded-wye windings, where 87T is least sensitive. It also requires CT saturation checks and is commonly supervised by directional logic for security.

CT circuit design practices that improve security

Specify CTs for transient performance: check the full-offset criterion at the maximum external fault current, including future system growth.
Use full-ratio taps where possible: avoid reduced taps on multi-ratio CTs in differential circuits.
Reduce burden: use dedicated relaying cores, short lead runs, larger lead conductors and relays mounted close to the CTs where practical.
Consider 1 A secondaries for long leads: lead burden falls with the square of the current, which can significantly improve performance on large transmission substations.
Balance CT performance: where possible, use CTs on both sides with similar saturation margins relative to the fault current they will carry.
Account for remanence: demagnetize CTs after DC resistance and polarity testing, and assume some remanence in the transient analysis.
Avoid shared CT circuits: do not share 87T CT cores with metering, bus differential or other burdens.
Check the CT location: bushing CTs and breaker CTs define different zone boundaries, which affects which faults are external and how much current each CT carries.

Verifying security: from calculation to playback

Step	Method	Purpose
Fault study	Short-circuit study for internal and external faults at all voltage levels	Maximum through-fault current and X/R
CT transient analysis	IEEE C37.110 criterion and time-to-saturation calculations; EMT simulation of CT response	Identify which CTs saturate and when
Relay characteristic plot	Plot internal and external fault operating points on the relay characteristic	Confirm margins for each case
COMTRADE playback	Replay simulated or recorded saturated waveforms into the relay or a model	Verify security logic for real waveforms
Commissioning tests	Polarity, ratio, burden, phase-angle and through-fault injection tests	Confirm compensation and wiring before energization
Event analysis	Review relay and DFR records after every external fault	Detect developing problems before a misoperation

Transformer type	Typical US voltages	Typical protection
Distribution substation transformer	69, 115 or 138 kV to 12.47, 13.8, 24.9 or 34.5 kV	87T, 87U, REF, 50/51, 63 sudden pressure
Generator step-up transformer	13.8 to 24 kV to 115 to 500 kV	Overall 87, 87T, 87N, 24 volts-per-hertz
Solar and BESS main power transformer	34.5 kV to 115, 138, 230 or 345 kV	87T with IBR fault current considerations
Transmission autotransformer	345/138 kV, 500/230 kV, 230/115 kV with delta tertiary	87T, 87N, tertiary protection, 63

Stage	Keentel scope	Outcome
CT specification	Ratio, accuracy class and transient performance checks to IEEE C37.110 and C57.13	CTs that support secure differential protection
Relay settings	87T, 87U, REF and backup settings, with compensation and harmonic logic	Secure and dependable transformer protection
Short-circuit and coordination studies	Internal and external fault studies at every voltage level	Settings based on actual system conditions
Misoperation analysis	Relay and DFR event review, root cause and corrective action plans for NERC PRC-004	Documented findings and verified corrections
Commissioning support	Test plans, through-fault injection and energization reviews	Confirmed wiring, polarity and compensation
Renewable and storage projects	Main power transformer protection for solar, wind and BESS interconnections	Protection that accounts for inverter fault behavior

The following are illustrative scenarios based on conditions typical of US utility and industrial substations. They show how Keentel Engineering approaches transformer differential security problems; site details are generalised and figures are rounded.

Case Study 1 — 138/13.8 kV substation transformer trips for a close-in feeder fault

Situation

A 50 MVA, 138/13.8 kV distribution substation transformer trips on 87T during a three-phase fault on a 13.8 kV feeder just outside the substation. The transformer tests healthy and is returned to service, but the trip is reportable as a misoperation.

Analysis

Relay event records show accurate CT currents for about the first quarter cycle, followed by severe distortion of the 13.8 kV CT currents while the 138 kV CT currents remain sinusoidal. A transient CT analysis confirms that the 3000:5 C400 low-voltage CTs exceed the IEEE C37.110 criterion by more than two times, worsened by a shared CT circuit that also supplies metering and long lead runs.

Engineered solution

Keentel separates the 87T circuit onto a dedicated relaying core, reduces lead burden, enables and tunes the relay's external fault detection logic, and revises the dual-slope settings. The recorded event is replayed through the revised settings to verify security, and internal fault cases are replayed to confirm dependability.

Outcome

The revised design restrains for the recorded event with margin while maintaining fast tripping for internal faults. The corrective action plan is documented for NERC PRC-004.

Case Study 2 — 345/138 kV autotransformer: false differential on an external ground fault

Situation

A 345/138 kV autotransformer with a delta tertiary operates on 87T during a single-line-to-ground fault on a nearby 138 kV line. The fault clears normally at the line terminals, but the autotransformer is also removed from service.

Analysis

Review of the settings shows that zero-sequence compensation was disabled during a relay replacement. The autotransformer's grounded windings supply zero-sequence current to the external ground fault that does not balance in the differential calculation. Moderate CT saturation on one set of 138 kV CTs increases the spill current further.

Engineered solution

Keentel corrects the zero-sequence and vector group compensation, adds restricted earth fault protection using the neutral CT for sensitive ground coverage, and verifies CT performance for the maximum 138 kV ground fault. Updated settings are tested with simulated external and internal fault waveforms.

Outcome

The autotransformer is secure for external ground faults, ground-fault sensitivity is improved through REF, and the settings review process is updated to include compensation checks after every relay replacement.

Case Study 3 — 230/34.5 kV solar main power transformer: security during energization and external faults

Situation

A 230/34.5 kV main power transformer for a 200 MW solar and storage plant trips on 87T twice: once during energization of a second, parallel transformer, and once during a 34.5 kV collector feeder fault.

Analysis

The first event is sympathetic inrush. Energizing the second transformer produces a slowly decaying DC current in the first transformer, which reduces second-harmonic content below the blocking threshold and drives the 34.5 kV CTs towards saturation. The second event is caused by saturation of 34.5 kV CTs on a reduced tap during the collector fault, with grid-side fault current carrying a high X/R ratio.

Engineered solution

Keentel moves the low-voltage CTs to full-ratio taps, enables harmonic cross-blocking with revised thresholds, tunes external fault detection, and specifies an energization sequence. Fault studies include both the grid contribution and the limited inverter fault current, which affects internal fault dependability.

Outcome

Subsequent energizations and external collector faults cause no 87T operations, while simulated internal faults trip within the required time.

1. Why can a differential relay see differential current when the transformer is healthy?
The relay sees CT secondary currents, not primary currents. During a severe external fault, one CT may saturate while the other does not. The secondary currents then no longer balance, and the relay calculates an apparent differential current even though there is no internal fault.
2. What is spill current?
Spill current is the differential current produced by measurement errors rather than an actual internal fault. Sources include CT saturation, CT ratio errors, tap changer position, magnetizing current and compensation errors.
3. Why does CT saturation happen mainly during external faults?
External faults close to the transformer produce the highest through current in both sets of CTs. That current usually includes a DC offset that drives the CT core flux in one direction. Combined with high burden or remanent flux, this can saturate a CT within the first cycle.
4. Why does one CT saturate before the other?
The CTs on each side have different ratios, accuracy classes, winding resistance, lead length, burden and remanence, and they carry different multiples of their rated current. Their saturation margins are therefore different.
5. What is the IEEE C37.110 saturation criterion?
Saturation is avoided when (1 + X/R) × If × Zb is 20 or less, where If is the fault current in per unit of CT rated current and Zb is the burden in per unit of the CT standard burden. It is a screening criterion for a fully offset fault.
6. What does a C800 rating mean?
Under IEEE C57.13, a C800 CT can deliver 20 times rated secondary current, 100 A for a 5 A CT, into an 8 Ω standard burden without exceeding 10% ratio error. It indicates the CT's voltage capability for relaying.
7. Why do multi-ratio CT taps matter?
The C rating applies to the full winding. On a lower tap, voltage capability falls in proportion to the turns used, so a 600:5 C800 CT on its 400:5 tap behaves roughly like a C533 CT.
8. What is a dual-slope characteristic?
It uses a low slope at normal currents, to accommodate tap changer and CT ratio errors while keeping sensitivity, and a high slope at high currents, where CT saturation during external faults is more likely.
9. What is external fault detection in a differential relay?
It identifies an external fault during the first few milliseconds, before the CTs saturate, by observing restraint current rising without a matching rise in operating current. The relay then applies extra security until the fault clears.
10. Why must zero-sequence current be removed?
A grounded-wye winding supplies zero-sequence current to external ground faults, but the delta winding on the other side does not carry that current out of the zone. Without zero-sequence removal, an external ground fault produces false differential current.
11. How does the delta-wye phase shift affect differential protection?
US delta-wye transformers shift phase angle by 30 degrees, with the high side leading the low side by ANSI convention. The relay must apply the correct compensation for the transformer's vector group, or every through-load and through-fault condition creates differential current.
12. How is inrush different from CT saturation?
Inrush is real primary current drawn by the transformer magnetizing branch during energization, rich in second harmonic. CT saturation is a measurement error during high fault currents. Harmonic restraint addresses inrush, while slope and external fault logic address saturation.
13. What is sympathetic inrush?
When a transformer is energized in parallel with one already in service, the DC component of the inrush current can cause the in-service transformer to draw inrush current too. It decays slowly, can reduce harmonic content and can saturate CTs.
14. How should the unrestrained element be set?
Above the maximum inrush current and above the worst false differential current from CT saturation during external faults, commonly 8 to 12 times tap. It should be confirmed against fault study results and CT transient analysis.
15. What is restricted earth fault protection?
REF compares the transformer neutral CT current with the residual current from the phase CTs. It detects ground faults near the neutral of grounded-wye windings that the 87T element may not detect.
16. Can CT saturation make a relay fail to trip for an internal fault?
Yes. Severe saturation during an internal fault can delay harmonic-blocked elements, because saturated waveforms contain harmonics. The unrestrained element and harmonic cross-blocking settings must be checked so security logic does not compromise dependability.
17. Why use 1 A CTs instead of 5 A CTs?
Lead burden is proportional to the square of the secondary current. With a 1 A secondary, the same leads impose 25 times less burden in volt-amperes, which greatly improves CT performance on large substations with long lead runs.
18. What is CT remanence, and how can it be reduced?
Remanence is magnetic flux left in the CT core after a fault or DC test. It reduces the margin before saturation. CTs should be demagnetized after DC testing, and transient studies should assume some remanence.
19. How do NERC standards apply to 87T misoperations?
For Bulk Electric System transformers, an unnecessary trip is a protection system misoperation under NERC PRC-004. The entity must identify the cause and develop and implement a corrective action plan. NERC PRC-005 also requires protection system maintenance and testing.
20. How can an 87T security problem be prevented before energization?
Specify CTs from short-circuit and transient analysis, verify compensation and characteristic settings with simulated internal and external fault waveforms, demagnetize CTs after testing, and complete through-fault and polarity tests during commissioning.

Links were current at publication (October 2026).

IEEE Std C37.91-2021, IEEE Guide for Protecting Power Transformers. IEEE.
IEEE Std C37.110-2007, IEEE Guide for the Application of Current Transformers Used for Protective Relaying Purposes. IEEE.
IEEE Std C57.13, IEEE Standard Requirements for Instrument Transformers. IEEE.
NERC Reliability Standard PRC-004, Protection System Misoperation Identification and Correction. North American Electric Reliability Corporation.
NERC Reliability Standard PRC-005, Transmission and Generation Protection System Maintenance Program. North American Electric Reliability Corporation.

This article is general technical information for educational purposes. It is not engineering advice for any specific project and does not create a professional relationship. Fault currents, CT data, burdens, X/R ratios and relay settings are illustrative; actual protection designs must follow the current editions of applicable standards, utility protection philosophy, equipment manufacturer instructions and project-specific engineering analysis, sealed by a licensed professional engineer where required. Verify the current edition of any standard before relying on it.

Case studies are illustrative scenarios based on typical project conditions, not records of specific client projects. Figures are rounded and indicative.

IEEE, NERC and other names are the property of their respective owners. Keentel Engineering is not affiliated with or endorsed by these organisations or any relay or equipment manufacturer.

Office	Address	Phone
Head Office — Tampa	400 N Ashley Dr STE #2600, Tampa FL 33602	(813) 389-7871
Austin	5900 Balcones Drive STE 100, Austin TX 78731	(512) 591-0752
Sacramento	1401 21st St Ste R, Sacramento CA 95811	(916) 913-4524
Baltimore	306 W Redwood St STE 200, Baltimore MD 21201	(410) 225-2181

In 1995, Sonny Patel earned his Electrical Engineering degree from the University of Illinois. But degrees don't build legacies — action does.

For three decades, he has worked the power industry from every side of the table: 16 years as a utility engineer at Exelon/Commonwealth Edison; generation leadership across hydroelectric, industrial steam turbine, and a 9 GW renewable fleet; NERC Regional Entity Senior Compliance Engineer and Audit Team Lead, auditing some of the nation's largest utilities; and testing and commissioning lead on equipment up to 765 kV — the very top of the North American grid.Utility. Generator. Regulator. Consultant. Few engineers have seen all four seats. Fewer still have sat in them.

His experience spans nuclear, hydro, conventional generation, renewables, oil and gas, mining — and today's data centers, where he is authoring a three-book series on data center design. He is a Licensed Professional Engineer in six states and a Licensed Electrical Contractor in Florida (Unlimited EC) — he doesn't just design the work; he's qualified to stand behind its execution.Today, as Founder and CEO of Keentel Engineering, Sonny leads a nationwide team of engineers delivering substation design, power system studies, NERC compliance, and commissioning — done right, coast to coast.Three decades. Every side of the table. One standard: accountable engineering.

In 1995, Sonny Patel earned his Electrical Engineering degree from the University of Illinois. But degrees don't build legacies — action does.

Utility. Generator. Regulator. Consultant. Few engineers have seen all four seats. Fewer still have sat in them.

Today, as Founder and CEO of Keentel Engineering, Sonny leads a nationwide team of engineers delivering substation design, power system studies, NERC compliance, and commissioning — done right, coast to coast.Three decades. Every side of the table. One standard: accountable engineering.

Grid inertia and RoCoF comparison showing frequency response, inertial power, and grid stability aft

The three operating regions you have to design to

Resilience: designing CDUs to the facility Tier objective

Electrical engineering considerations

Commissioning a liquid-cooled data hall

How Keentel Engineering helps

Why a Transformer Differential Relay Sees Differential Current During an External Fault: An Engineering Guide

Part A — Transformer Differential Security at a Glance

Why a healthy transformer can produce differential current

The key relationships

Why it matters

Part B — Why a Transformer Differential Relay Sees Differential Current During an External Fault: An Engineering Guide

The differential principle

Compensation: ratio, phase shift and zero sequence

﻿

Normal sources of differential current

How CT saturation creates spill current

The IEEE C37.110 saturation criterion

IEEE C57.13 relaying accuracy classes

Worked example: a 138/13.8 kV substation transformer

How modern 87T relays stay secure

CT circuit design practices that improve security

Verifying security: from calculation to playback

US voltage classes and typical 87T applications

How Keentel Engineering helps

Part C — Case Studies

Case Study 1 — 138/13.8 kV substation transformer trips for a close-in feeder fault

Case Study 2 — 345/138 kV autotransformer: false differential on an external ground fault

Case Study 3 — 230/34.5 kV solar main power transformer: security during energization and external faults

Part D — Technical FAQ: Transformer Differential Protection and External Faults

1. Why can a differential relay see differential current when the transformer is healthy?

2. What is spill current?

3. Why does CT saturation happen mainly during external faults?

4. Why does one CT saturate before the other?

5. What is the IEEE C37.110 saturation criterion?

6. What does a C800 rating mean?

7. Why do multi-ratio CT taps matter?

8. What is a dual-slope characteristic?

9. What is external fault detection in a differential relay?

10. Why must zero-sequence current be removed?

11. How does the delta-wye phase shift affect differential protection?

12. How is inrush different from CT saturation?

13. What is sympathetic inrush?

14. How should the unrestrained element be set?

15. What is restricted earth fault protection?

16. Can CT saturation make a relay fail to trip for an internal fault?

17. Why use 1 A CTs instead of 5 A CTs?

18. What is CT remanence, and how can it be reduced?

19. How do NERC standards apply to 87T misoperations?

20. How can an 87T security problem be prevented before energization?

References and Further Reading

Disclaimer

Services

Let's Discuss Your Project

About the Author:

Sandip "Sonny" R. Patel, P.E.

IEEE Senior Member · Founder & CEO, Keentel Engineering

Leave a Comment

Related Posts

Head Office

Austin Office

Sacramento Office

Baltimore Office