Client is running a BTG on all databases to search for bad encryption values, and receives this in the output:
GENERATED CARD
==) -BTG ELEMENT,RECORD-TBA-TDB. GENERATED CARD
==) - TBADT0001-0023(T001) GENERATED CARD
==) 1001 'DATACOM ', GENERATED CARD
==) - 'DATACOM ' $$RC=SVL DSFCMD=OUTENTIT TYP=ELEMENT RCN=RECORD-TBA-TDB OCN=TBADT0001-
SECURITY-CODE TRUNCATED C -* * * BTG/DSF ERROR FUNCTION=OUTENTIT RET CODE= SVL * * * * * * * * * * *

The error message: 

SECURITY-CODE TRUNCATED C -* * * BTG/DSF ERROR FUNCTION=OUTENTIT RET CODE= SVL

is known to be caused by MEDIA-LENGTH not being set to zero.

z/os, CA Datacom/DB 14.0 and higher  

Ask customer for a DDUTILTY report:
//SYSIN DD *
-USR DATACOM-INSTALL,NEWUSER
-RPT DETAIL,FIELD,ELEMENT.SECURITY-CODE(PROD,PRIV)
-END
/*

Check MEDIA LENGTH.
If not zero then problem should be solved by the following DDUPDATE and DDCFBLD:
-1- Execute DDUPDATE with the following SYSIN: 
//SYSIN DD *
 -USR DATACOM-INSTALL,NEWUSER                       
 -UPD FIELD,ELEMENT.SECURITY-CODE(PROD,DD,PRIV)     
 4099 Y N N N N 000                                 
 -END 
/*  
                                           
-2- followed by the following DDCFBLD with the following SYSIN: 
//SYSIN DD *
-USR DATACOM-INSTALL,NEWUSER                       
-HSD RESET                                         
-END       
/*                                       

The above two steps should resolve the problem.