SHA-2 is more widely supported and the de-facto standard these days. I'm not surprised that an entity like Microsoft ends up being conservative with its choices of algorithms. I guess they could've gone for SHA-3 but I suppose even that is a bit too "bleeding edge" for MS.