Comment by mastahyeti

You still have to configure TOTP (SMS or App) 2FA before you can add a U2F device. That might change in the future.