The processor changes from Non-secure to Secure state only because of an exception. The PTM traces this in the usual way. It outputs a waypoint update packet, if required, and then outputs an exception branch address packet. If you have enabled Context ID tracing then the PTM generates a Context ID packet, if required, immediately after generating the exception branch address packet.