Protection designed around a large, predictable synchronous-machine fault current can lose sensitivity, directionality and selectivity when an MV network becomes inverter-dominated. An inverter’s fault response is a controlled waveform constrained by semiconductor current, DC source, firmware, grid-following/grid-forming strategy and ride-through requirements—not a universal fixed multiple of rated current.
This guide explains how solar PV, BESS, wind/converter generation and other inverter-based resources (IBRs) affect MV overcurrent, earth-fault, directional, distance, differential, fuse, reclosing and islanding schemes. It provides a model-to-settings workflow, practical mitigation matrix and dynamic FAT/SAT/HIL test plan.
Executive conclusions
- Never assume “all inverters supply 1.1 or 1.2 pu fault current.” Obtain vendor- and firmware-specific positive-, negative- and zero-sequence dynamic behavior.
- Pre-fault export/import does not prove fault-current direction; controls, current priority and voltage determine the response.
- Recalculate minimum fault sensitivity and directional polarization for grid-connected, weak-grid and islanded modes.
- Prefer protection based on zone comparison, communications and reliable voltage/sequence information when current magnitude alone is insufficient.
- Coordinate protection with mandatory ride-through and plant-controller behavior; a DER trip setting cannot simply be shortened to fix feeder protection.
- Validate relay elements with time-domain waveforms, EMT or hardware-in-the-loop tests. A static short-circuit table is often not enough.
1. What “inverter-dominated” means for protection
An inverter-dominated network is one in which power-electronic sources materially determine the voltage/current during faults or abnormal conditions. The percentage of annual energy is not the deciding metric. A feeder can be protection-dominated by IBRs during a weak-grid or islanded interval even if a strong utility source normally supplies most fault current.
- Assess the instantaneous connected synchronous and inverter sources for each topology.
- Consider grid strength and the electrical distance between IBR, relay and fault.
- Include plant transformers and their winding/grounding paths.
- Separate converter current limit from plant output rating; many units may share one controller or collector bus.
- Study the first milliseconds/cycles, ride-through interval, control transition and final trip—not one steady RMS value.
2. Grid-following versus grid-forming behavior
| Feature | Grid-following (GFL) | Grid-forming (GFM) |
|---|---|---|
| Reference | Typically synchronizes to measured grid voltage through a control/phase-tracking process | Controls an internal voltage/frequency reference and establishes/supports a grid waveform |
| Weak-grid sensitivity | Phase tracking and current control can be challenged by distorted/depressed voltage | Can support weak/islanded operation, but current limiting changes its voltage-source behavior |
| Fault current | Controlled current with configured active/reactive/sequence priority | Initially voltage-forming response then constrained by current limiter/control strategy |
| Protection implication | Direction/sequence may follow controller objectives rather than passive impedance | Apparent impedance and phase can change when limiting/control mode changes |
These are families, not two identical models. Current limiting, virtual impedance, negative-sequence control, momentary cessation, DC-link protection and fault ride-through vary by vendor and firmware. A “GFM” label alone is not protection data.
3. Why the fault current is different
- Magnitude is limited: semiconductor and thermal constraints normally prevent the high subtransient multiple supplied by a synchronous generator.
- Waveform is controlled: current magnitude, phase angle and sequence content may change within the fault as controls saturate or switch modes.
- Duration is programmed: the IBR may ride through, cease current momentarily, recover, or trip under interconnection requirements and internal protection.
- Negative sequence is not automatic: some controls suppress or regulate it, which can affect 32Q, 46, 67 and distance polarization.
- Zero sequence depends on hardware: converter topology, transformer vector group, grounding and filters may block it regardless of positive-sequence output.
- Frequency content can differ: control transients, harmonics/interharmonics and filter response may challenge phasor estimation.
Therefore, request current-versus-time phasors or time-domain waveforms for three-phase, phase-phase and grounded faults at several residual voltages, grid strengths, operating points and control modes. Include current limiting and protection/ride-through transitions.
4. Standards map and scope boundaries
- IEEE 1547-2018 with IEEE 1547a-2020 applies to DER interconnection at typical distribution voltages in 60 Hz systems and includes abnormal-condition response, islanding, interoperability and testing requirements.
- IEEE 1547.2-2023 is the active application guide; IEEE 1547.9-2022 addresses energy-storage DER applications.
- IEC TS 62786-1:2023 gives general DER connection requirements at the point of connection for LV/MV networks, including generation and storage.
- IEEE 2800-2022 addresses transmission and sub-transmission IBR interconnection. It is useful technically but is not a blanket distribution-feeder requirement.
- IEC 60909-0:2026 is the current IEC short-circuit calculation standard; use its converter treatment within scope and supplement it with dynamic vendor models where protection behavior requires.
- IEC 60255/IEEE C37 requirements apply to protection IED functions; IEC 61850 applies to communications and model/configuration where used.
Interconnection standards define resource performance obligations; they do not supply a complete feeder protection design. The applicable grid code, utility interconnection agreement, jurisdiction and exact standard edition/category/settings must be recorded.
5. Overcurrent 50/51 and fuse challenges
- Minimum fault current may be close to maximum load/export current, leaving no secure pickup window.
- An IBR contribution can increase current in one section while reducing utility current seen by another relay (“blinding” or reach change).
- Short-duration controlled current may start but not complete an inverse-time element or fuse melting.
- A fuse that was selective with a strong radial source may not clear an islanded fault, or may operate for reverse contribution to an upstream fault.
- Current-limiting and inverter current-limit interactions require actual time-domain/energy checks, not a single symmetrical RMS number.
- Instantaneous thresholds can overreach in strong-grid mode yet be blind in weak/island mode.
Mitigations include lower/supervised settings where load margin permits, voltage-restrained/controlled overcurrent, directional elements with validated polarization, differential/communications, adaptive groups, transfer trip and a deliberately coordinated strong-source backup. Do not lower pickup below credible operating transients to “make it sensitive.”
6. Directional overcurrent and earth-fault elements
Directional elements infer fault direction from current and polarizing voltage/sequence quantities. IBR controls can rotate current relative to voltage, suppress negative sequence, prioritize reactive current or lose reliable voltage reference in a close-in fault.
- Test 67 phase elements over residual voltage, current-limit transition and GFL/GFM modes; verify memory voltage and cross-polarization.
- For 67N, model the complete zero-sequence network, transformer vector group and grounding transformer/resistor.
- Do not assume a grounded converter terminal produces zero-sequence current through a delta collector transformer.
- Verify negative-sequence directional (32Q/67Q) logic against the IBR’s regulated or absent I2 response.
- Use voltage-polarized, wattmetric, admittance or transient earth-fault methods as appropriate to grounding—not simply residual magnitude.
- Test direction during pre-fault import, export, zero power and BESS charge/discharge.
7. Distance and impedance elements
Distance protection assumes a meaningful relationship between measured voltage and current and the line impedance to fault. IBR current control, remote infeed/outfeed, weak voltage, limited negative sequence and changing control angle can distort the apparent impedance trajectory.
- Replay EMT waveforms through the exact relay algorithm; a static Z = V/I point misses transient trajectory and filtering.
- Check underreach/overreach for close-in and remote faults, resistive faults, weak-grid modes and current limiting.
- Verify memory polarization and directional security when voltage collapses or PLL/control dynamics cause phase changes.
- Use permissive/blocking/transfer-trip or line differential where local impedance evidence is insufficient.
- Do not expand a zone merely to recover sensitivity without testing load encroachment, power swing/control oscillation and adjacent-zone security.
8. Differential protection: strong option, not automatic immunity
87L, 87B, 87T and restricted earth fault compare currents around a defined zone and can remain sensitive when absolute IBR current is low. Yet they still depend on correctly bounded CTs/MUs, time alignment, communications, transformer compensation and adequate fault current above measurement error.
- Include every source—including BESS backfeed—and trip all breakers that can energize the zone.
- Dimension CT/MU range for the strongest grid-through fault even if the IBR contribution is limited.
- Test external faults with unequal CT saturation, converter distortion and current-limit transitions.
- For transformer differential, coordinate harmonic/waveform restraint with converter harmonics and energization.
- REF sensitivity still depends on a zero-sequence path and neutral/phase CT arrangement; a delta interface changes coverage.
- Provide communication/time failure fallback and breaker-failure transfer trip.
9. BESS-specific protection considerations
| BESS condition | Protection implication |
|---|---|
| Charging versus discharging | Pre-fault real-power direction changes; fault current follows converter control, not simply P sign |
| State of charge/DC voltage | Available control/ride-through behavior may change within vendor limits |
| Multiple power-conversion blocks | Aggregate contribution and staggered blocking/trip must be modeled |
| Island/grid-forming mode | Fault level, frequency/voltage reference and settings group can change abruptly |
| Collector transformer grounding | Determines zero-sequence path seen by MV relays |
| Internal DC/battery protection | May command rapid converter shutdown without operating MV feeder protection |
Coordinate MV breaker trip, converter blocking, DC contactors, transformer protection, fire-safety controls and plant emergency shutdown. They have different purposes and isolation capabilities. Converter current cessation does not provide a visible isolation point or prove the MV cable/transformer is de-energized.
10. Ride-through versus protection selectivity
Modern grid codes often require DER to remain connected and support voltage/frequency through specified disturbances. Feeder protection must clear the faulted zone while healthy DER rides through faults outside its zone. Arbitrarily tightening plant undervoltage, frequency or ROCOF trips can violate interconnection requirements and cause a larger generation loss.
- Overlay utility/DER ride-through and trip curves with feeder, bus, transformer and backup clearing times including breaker failure.
- Differentiate mandatory clearing for an internal/island fault from ride-through of an external fault.
- Coordinate plant-level controller commands, unit-level inverter protection and POI relay settings.
- Account for voltage support/current priority during fault—the behavior may change the relay quantity while intentionally remaining connected.
- Use transfer trip or zone protection when local voltage/frequency cannot identify the faulted section selectively.
11. Islanding, reclosing and resynchronization
- Define whether intentional islanding is permitted. If not, detect and isolate the island within the applicable requirements.
- Passive voltage/frequency/ROCOF methods have non-detection zones and can conflict with ride-through; communications-based transfer trip may be required.
- Block automatic reclosing onto an energized unsynchronized island; use dead-line/dead-bus and synchronism-check logic with trustworthy VT sources.
- For intentional islands, transfer protection settings, grounding source and grid-forming controls as one sequenced scheme.
- Supervise failed settings-group/control-mode transfer and use a conservative fallback.
- Test utility loss at load-generation balance, not only a large power mismatch.
- Coordinate resynchronization, breaker close permissive and restoration ramp to avoid out-of-phase closing.
12. Adaptive settings and topology logic
Settings groups can adapt pickup, direction, time and reclosing for grid-connected, weak-grid, island, tie-open/closed and BESS modes. This adds a control system to protection and must be engineered accordingly.
- Use direct breaker/disconnector and validated plant-mode status rather than a SCADA screen label alone.
- Require positive confirmation of the intended group; alarm and record mismatch.
- Define behavior during transition and contradictory/invalid topology states.
- Do not create a brief unprotected window while CT/VT, inverter mode and settings change at different times.
- Test every legal transition plus loss of GOOSE/communications, IED reboot and manual override.
- Keep a coordinated default group that is safe for the least certain state, even if less selective.
13. Protection options by challenge
| Challenge | Candidate mitigation | Critical proof |
|---|---|---|
| Low fault-current magnitude | Differential, transfer trip, voltage-restrained OC, sensitive directional | Minimum-fault and operating-load margin |
| Uncertain current direction | Validated voltage/sequence polarization, communications | EMT/HIL across controls and grid strength |
| Fuse does not clear island fault | Breaker/relay protection or island trip | Total clearing for minimum IBR fault |
| Distance under/overreach | 87L or pilot scheme; revised supervised zones | Relay playback of dynamic apparent impedance |
| Loss of negative sequence | Voltage-based/alternative directional logic or specified IBR response | Vendor model and dynamic fault tests |
| Unintentional island | Transfer trip plus local backup | Balanced-load case and communication failure |
| Variable topology | Adaptive groups with hard supervision | All transitions and invalid states |
14. Study workflow: from data request to settings
- Define protection zones, operating modes, grounding and breaker isolation points.
- Obtain utility and IBR data, exact firmware/control modes, plant transformer/filter and protection/ride-through settings.
- Calculate IEC/approved-method maximum and minimum faults for all topologies, with converter contribution represented within model scope.
- Perform sequence-domain studies for phase/ground/directional functions and identify missing/controlled I2/I0.
- Use time-domain RMS/phasor simulation for control-dependent current and EMT where PLL/current limiter, weak grid, harmonics or subcycle behavior matters.
- Feed simulated/recorded waveforms into the actual relay model or hardware and evaluate element decisions/timing.
- Select main and backup functions, settings groups, communication and breaker-failure scheme.
- Coordinate ride-through, fuse/breaker curves, equipment damage and arc-flash clearing.
- Document limitations, assumed firmware and triggers that invalidate the study.
15. Model requirements and validation
- Use vendor-validated models suitable for the phenomenon: load-flow, short-circuit, positive-sequence dynamic and/or EMT.
- Represent plant controller, unit controls, current limiter, GFL/GFM mode, negative-sequence logic, transformer/grounding and internal protection.
- Cover low/high output, charge/discharge, strong/weak grid, voltage/frequency ride-through and momentary cessation/recovery.
- Do not extrapolate one generic model to different inverter families or firmware without written validation.
- Compare models with factory/site fault-ride-through tests and disturbance records where available.
- Preserve executable model version, parameters and confidentiality/access arrangements for future event analysis.
16. Dynamic FAT, HIL and relay tests
- Inject/play back three-phase, phase-phase and grounded faults at close-in/remote locations and several fault resistances.
- Vary strong/weak grid, grid-connected/islanded, GFL/GFM, PV output and BESS charge/discharge/state conditions.
- Test current-limit entry/exit, ride-through, momentary cessation, negative-sequence control and converter trip/recovery.
- Measure 50/51 pickup/timing, 67/67N direction, distance trajectory, differential restraint and voltage/frequency/ROCOF decisions.
- Test fuse/relay or relay/relay coordination using the actual current-versus-time contribution.
- Exercise communications/transfer-trip/ZSI loss, latency and recovery; prove coordinated local backup.
- Operate all adaptive settings transitions, conflicting topology states and loss of mode indication.
- Simulate breaker failure, failed converter shutdown, remaining sources and all-source trip.
- Check reclose block, live/dead-line logic, synchronism and balanced island condition.
- Archive COMTRADE, relay event/SOE, plant-controller logs and model scenario for every acceptance case.
17. SAT and commissioning
- Verify CT/VT/CBCT ratio, polarity, transformer vector group and grounding path through live/primary tests.
- Confirm plant and unit firmware, control mode, POI settings and model parameters match the approved study.
- Trip every required breaker from POI/feeder/bus/transformer protection and prove breaker-failure/transfer trip.
- Prove settings-group status and transition for all authorized operating modes.
- Test communication failure, utility-source loss, reclose block and synchronism-check interfaces.
- Capture baseline load phasors, positive/negative/zero-sequence values, power direction and relay margin.
- Establish a controlled energization plan with temporary monitoring and clear abort criteria.
18. Monitoring and disturbance records
- Time-synchronize relay, inverter, plant controller, PQ meter and breaker SOE.
- Record three-phase V/I, sequence quantities, element bits, current-limit/mode, ride-through state, trip commands and breaker status.
- Use sufficient pre-fault and post-fault duration to capture control transition and recovery.
- Trigger on voltage disturbance and protection starts, not only final trips.
- Preserve native high-resolution controller data and COMTRADE with model/firmware/settings identifiers.
- Review near-miss starts and unexpected momentary cessation; they are evidence that study assumptions may be wrong.
19. Cybersecurity and change management
IBR behavior is software-defined. A firmware, plant-controller, ride-through, communications or current-limit change can alter protection performance without any one-line modification.
- Place protection-affecting control parameters under joint plant/utility engineering approval.
- Record firmware/model/settings hashes and block unauthorized remote changes.
- Retest affected relay elements after vendor patches or control-mode changes.
- Secure transfer-trip, settings-group and plant-mode communications; define fail-safe response.
- Monitor configuration drift and retain rollback/model compatibility.
- Make study review mandatory after inverter replacement, uprate, BESS augmentation, transformer/grounding or utility fault-level change.
20. Frequent mistakes
| Mistake | Consequence | Correction |
|---|---|---|
| Universal fault-current multiple assumed | Pickup/direction model is wrong | Vendor/firmware dynamic sequence data |
| Only maximum grid fault studied | Island/weak-grid protection blind | Minimum multi-mode studies |
| Pre-fault P direction used for 67 | Fault direction misclassified | Dynamic polarizing/current-angle tests |
| GFL/GFM label treated as model | Current limiter/control transition missed | Validated detailed model/HIL |
| DER trip shortened below ride-through | Widespread unnecessary generation loss | Zone/communication protection coordination |
| Delta transformer zero sequence ignored | 67N/51N coverage overstated | Physical zero-sequence network |
| Static TCC only | Controlled current duration ignored | Time-domain relay/fuse evaluation |
| Firmware change not restudied | Protection response silently changes | Configuration/model governance |
21. Handover checklist
- Operating-mode and protection-zone matrix.
- Validated IBR/plant models, parameters, firmware and limitations.
- Maximum/minimum/sequence and EMT study reports.
- Relay settings, adaptive-group logic, trip/communication/breaker-failure matrix.
- Ride-through, fuse/breaker coordination and arc-flash cross-check.
- FAT/HIL/SAT waveforms, event records and measured timings.
- As-left plant/relay/controller configuration and controlled change triggers.
- Incident-data retrieval, spare/firmware and periodic review procedures.
References and further reading
- IEEE 1547-2018 — DER interconnection and interoperability
- IEEE 1547a-2020 — Amendment 1
- IEEE 1547.2-2023 — Application guide
- IEEE 1547.9-2022 — Energy-storage DER interconnection guide
- IEC TS 62786-1:2023 — General DER connection requirements for LV/MV grids
- IEEE 2800-2022 — Transmission/sub-transmission IBR interconnection
- IEC 60909-0:2026 — Short-circuit calculations
- NREL/NLR — Protection challenges introduced by inverter fault behavior
- NREL/TP-5D00-94430 (2025) — Impact of IBR modeling and control on protection relay elements
- NERC PRC-028-1 — IBR disturbance monitoring/reporting for applicable BES facilities
Engineering note: Requirements differ by jurisdiction and interconnection agreement. Use the exact plant/inverter data and applicable grid code; the article does not provide project settings or authorize changes to mandatory ride-through/protection functions.