Needs one of your recovery codes AND the current code from your authenticator. Lost both? Reset from the server console (setup-admin).