Setting Up Multi-Server Administration---SQL Server Account
One weakness of MSX is that target servers uses Windows authentication and you can't change that.
I.e., your target Agent need a domain account as a service account and that account need to exist as a Windows login on the master SQL Server (and also be a user in the msdb database there and a member of the TargetServersRole).