If your account has got 2 factor authentication enabled, an app specific password is required, just like the message says.
Topic:
Code Signing
SubTopic:
Notarization