"Disabled" in this context just means you haven't yet configured two step verification for your account.
You are being told that you must enable it because either you have activated the Admin CP option which requires you to enable it to log in there, or you have set the "Require two-step verification" permission to "Yes".