When you have an Autoenrollment Server installed in a multiple-domain forest, you may run into authentication issues with certificate enrollments across the forest.
Please follow the steps to configure the Autoenrollment Server to work in these types of configurations.