When using IBM MFA 2.2 with Top Secret, the following abend can occur:
TSS9999E CA-TSS SECURITY SVC ABEND S0C4 IN TSSKERNL+201B0
CCSR010E TSSRSVCS S0C4 at 2DA5A5D8 LMOD TSSKERNL CSECT TSSKEXTR +001078 MFA N/A MFA
AZF2408I Authenticator not defined (MFADEF profile not defined)
Release : 16.0
Component : Top Secret for z/OS
The S0C4 in TSSKEXTR+1078 is due to the RACF parameter list field EXTOFF (extension offset) containing an offset value of zeros.
Top Secret is always expecting a non-zero offset, hence the abend occur because of this zero value in RACFPL+6 (EXTOFF).
This problem is solved by the IBM APARs PH43801 and AH44381 in conjunction with the following instructions:
After the APARs were applied, update (via AZFEXEC) the following option and set it to N.
Under "Configuring IBM MFA STC configuration attributes", see the new option "Enable Dynamic Instance names". Change from Y to N.