When you have an Autoenrollment Server installed in a multiple-domain forest, you may run into authentication issues with certificate enrollments across the forest.
Please see the attached PDF for steps to configure the Autoenrollment Server to work in these types of configurations.
If you need further assistance, contact DigiCert Support.