Set up 2FA on your own account first
Before you enable Enforce Two Factor Authentication, set up 2FA on your own account under My User Profile > Two Factor. If your own account does not use 2FA yet, the setting does not save, and a Password policy update failed message appears.